init

2026-02-12 18:42:12 +08:00
4 changed files with 307 additions and 4 deletions
@@ -13,9 +13,9 @@ steps:
      password:
        from_secret: docker_password
      registry: https://registry.cn-hangzhou.aliyuncs.com
-      repo:  registry.cn-hangzhou.aliyuncs.com/loghub/rabbitmq
+      repo:  registry.cn-hangzhou.aliyuncs.com/loghub/nginx
      tags:
-        - 4.2-management-alpine
+        - 1.29.4

 volumes:
  - name: ruoyi_cache
@@ -1,5 +1,162 @@
-FROM rabbitmq:4.2-management-alpine
+FROM alpine:3.23
+
+ENV LANG=en_US.UTF-8
+ENV NGINX_VERSION=1.29.4
+ENV NGX_DEVEL_KIT_VERSION=0.3.4
+ENV LUA_NGINX_MODULE_VERSION=0.10.29
+ENV HEADERS_MORE_VERSION=0.39
+ENV LUA_RESTY_CORE=0.1.32
+ENV LUA_RESTY_LRUCACHE=0.15
+ENV LUA_RESTY_UPSTREAM_HEALTHCHECK=0.08
+

 RUN set -eux; \
-    apk update; \
+	apk update; \
    apk upgrade ;
+
+# # Install LUAJIT and LUARestyCore
+# RUN apk update && apk add --no-cache luajit lua-resty-core
+
+RUN set -eux; \
+    CONFIG="\
+		--prefix=/etc/nginx \
+		--sbin-path=/usr/sbin/nginx \
+		--conf-path=/etc/nginx/nginx.conf \
+		--error-log-path=/var/log/nginx/error.log \
+		--http-log-path=/var/log/nginx/access.log \
+		--pid-path=/var/run/nginx.pid \
+		--lock-path=/var/run/nginx.lock \
+		--http-client-body-temp-path=/var/cache/nginx/client_temp \
+		--http-proxy-temp-path=/var/cache/nginx/proxy_temp \
+		--http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp \
+		--http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp \
+		--http-scgi-temp-path=/var/cache/nginx/scgi_temp \
+		--user=nginx \
+		--group=nginx \
+		--with-http_ssl_module \
+		--with-http_realip_module \
+		--with-http_addition_module \
+		--with-http_sub_module \
+		--with-http_dav_module \
+		--with-http_flv_module \
+		--with-http_mp4_module \
+		--with-http_gunzip_module \
+		--with-http_gzip_static_module \
+		--with-http_random_index_module \
+		--with-http_secure_link_module \
+		--with-http_stub_status_module \
+		--with-http_auth_request_module \
+		--with-threads \
+		--with-stream \
+		--with-stream_ssl_module \
+		--with-http_slice_module \
+		--with-mail \
+		--with-mail_ssl_module \
+		--with-file-aio \
+		--with-http_v2_module \
+		--with-ld-opt='-Wl,-rpath,/usr/lib' \
+        --add-module=/tmp/ngx_devel_kit-${NGX_DEVEL_KIT_VERSION} \
+        --add-module=/tmp/lua-nginx-module-${LUA_NGINX_MODULE_VERSION} \
+        --add-module=/tmp/headers-more-nginx-module-${HEADERS_MORE_VERSION} \
+	"\
+	&& addgroup -S nginx \
+	&& adduser -D -S -h /var/cache/nginx -s /sbin/nologin -G nginx nginx \
+	&& apk add --no-cache --virtual .build-deps \
+		gcc \
+		libc-dev \
+		make \
+		openssl-dev \
+		pcre-dev \
+		zlib-dev \
+		linux-headers \
+		curl \
+		gnupg \
+		luajit-dev \
+        pax-utils \
+	&& export LUAJIT_LIB=/usr/lib \
+	&& export LUAJIT_INC=/usr/include/luajit-2.1 \
+	&& curl -fSL https://github.com/simpl/ngx_devel_kit/archive/v${NGX_DEVEL_KIT_VERSION}.tar.gz -o /tmp/ndk.tar.gz \
+	&& tar -xvf /tmp/ndk.tar.gz -C /tmp \
+	&& curl -fSL https://github.com/openresty/lua-nginx-module/archive/v${LUA_NGINX_MODULE_VERSION}.tar.gz -o /tmp/lua-nginx.tar.gz \
+	&& tar -xvf /tmp/lua-nginx.tar.gz -C /tmp \
+    && curl -fSL https://github.com/openresty/headers-more-nginx-module/archive/v${HEADERS_MORE_VERSION}.tar.gz -o /tmp/headers-more.tar.gz \
+    && tar -xvf /tmp/headers-more.tar.gz -C /tmp \
+    && curl -fSL https://nginx.org/download/nginx-$NGINX_VERSION.tar.gz -o nginx.tar.gz \
+	&& export GNUPGHOME="$(mktemp -d)" \
+	&& mkdir -p /usr/src \
+	&& tar -zxC /usr/src -f nginx.tar.gz \
+	&& rm nginx.tar.gz \
+	&& cd /usr/src/nginx-$NGINX_VERSION \
+	&& ./configure $CONFIG --with-debug \
+	&& make -j$(getconf _NPROCESSORS_ONLN) \
+	&& mv objs/nginx objs/nginx-debug \
+	&& ./configure $CONFIG \
+	&& make -j$(getconf _NPROCESSORS_ONLN) \
+	&& make install \
+    && mkdir -p /usr/local/share/lua/5.1  \
+    && curl -fSL https://github.com/openresty/lua-resty-core/archive/v${LUA_RESTY_CORE}.tar.gz -o /tmp/lua-resty-core.tar.gz  \
+    && tar -xvf /tmp/lua-resty-core.tar.gz -C /tmp \
+    && cp -r /tmp/lua-resty-core-${LUA_RESTY_CORE}/lib/resty /usr/local/share/lua/5.1/ \
+    && rm -rf  /tmp/lua-resty-core-${LUA_RESTY_CORE}  \
+    && rm -rf  /tmp/lua-resty-core.tar.gz  \
+    && curl -fSL https://github.com/openresty/lua-resty-lrucache/archive/v${LUA_RESTY_LRUCACHE}.tar.gz -o /tmp/lrucache.tar.gz \
+    && tar -xzf /tmp/lrucache.tar.gz -C /tmp \
+    && cp -r /tmp/lua-resty-lrucache-${LUA_RESTY_LRUCACHE}/lib/resty /usr/local/share/lua/5.1/ \
+    && rm -rf  /tmp/lua-resty-lrucache-${LUA_RESTY_LRUCACHE} \
+    && rm -rf  /tmp/lrucache.tar.gz  \
+    && curl -fSL https://github.com/openresty/lua-resty-upstream-healthcheck/archive/v${LUA_RESTY_UPSTREAM_HEALTHCHECK}.tar.gz -o /tmp/healthcheck.tar.gz \
+    && tar -xzf /tmp/healthcheck.tar.gz -C /tmp \
+    && cp -r /tmp/lua-resty-upstream-healthcheck-${LUA_RESTY_UPSTREAM_HEALTHCHECK}/lib/resty   /usr/local/share/lua/5.1/ \
+    && rm -rf  /tmp/lua-resty-upstream-healthcheck-${LUA_RESTY_UPSTREAM_HEALTHCHECK}  \
+    && rm -rf  /tmp/healthcheck.tar.gz  \
+    && mkdir -p /var/cache/nginx/client_temp \
+           /var/cache/nginx/proxy_temp \
+           /var/cache/nginx/fastcgi_temp \
+           /var/cache/nginx/uwsgi_temp \
+           /var/cache/nginx/scgi_temp \
+	&& rm -rf /etc/nginx/html/ \
+	&& mkdir /etc/nginx/conf.d/ \
+	&& mkdir -p /usr/share/nginx/html/ \
+    && chown -R nginx:nginx /var/cache/nginx \
+	&& install -m644 html/index.html /usr/share/nginx/html/ \
+	&& install -m644 html/50x.html /usr/share/nginx/html/ \
+	&& install -m755 objs/nginx-debug /usr/sbin/nginx-debug \
+	&& strip /usr/sbin/nginx* \
+	&& rm -rf /usr/src/nginx-$NGINX_VERSION \
+	&& rm -f /tmp/ndk.tar.gz \
+	&& rm -f /tmp/lua-nginx.tar.gz \
+    && rm -f /tmp/headers-more.tar.gz \
+	&& rm -rf /tmp/ngx_devel_kit-${NGX_DEVEL_KIT_VERSION} \
+	&& rm -rf /tmp/lua-nginx-module-${LUA_NGINX_MODULE_VERSION} \
+    && rm -rf /tmp/headers-more-nginx-module-${HEADERS_MORE_VERSION} \
+	\
+	# Bring in gettext so we can get `envsubst`, then throw
+	# the rest away. To do this, we need to install `gettext`
+	# then move `envsubst` out of the way so `gettext` can
+	# be deleted completely, then move `envsubst` back.
+	&& apk add --no-cache --virtual .gettext gettext \
+	&& mv /usr/bin/envsubst /tmp/ \
+    	&& runDeps="$( \
+		scanelf --needed --nobanner /usr/sbin/nginx /tmp/envsubst \
+			| awk '{ gsub(/,/, "\nso:", $2); print "so:" $2 }' \
+			| sort -u \
+			| xargs -r apk info --installed \
+			| sort -u \
+	)" \
+	\
+	&& apk add --no-cache --virtual .nginx-rundeps $runDeps \
+	&& apk del .build-deps \
+	&& apk del .gettext \
+	&& mv /tmp/envsubst /usr/local/bin/ \
+	\
+	# forward request and error logs to docker log collector
+	&& ln -sf /dev/stdout /var/log/nginx/access.log \
+	&& ln -sf /dev/stderr /var/log/nginx/error.log
+
+COPY nginx.conf /etc/nginx/nginx.conf
+COPY nginx.vh.default.conf /etc/nginx/conf.d/default.conf
+
+EXPOSE 80 443
+
+CMD ["nginx", "-g", "daemon off;"]
+
@@ -0,0 +1,88 @@
+# nginx.conf  --  docker-openresty
+#
+# This file is installed to:
+#   `/usr/local/openresty/nginx/conf/nginx.conf`
+# and is the file loaded by nginx at startup,
+# unless the user specifies otherwise.
+#
+# It tracks the upstream OpenResty's `nginx.conf`, but removes the `server`
+# section and adds this directive:
+#     `include /etc/nginx/conf.d/*.conf;`
+#
+# The `docker-openresty` file `nginx.vh.default.conf` is copied to
+# `/etc/nginx/conf.d/default.conf`.  It contains the `server section
+# of the upstream `nginx.conf`.
+#
+# See https://github.com/openresty/docker-openresty/blob/master/README.md#nginx-config-files
+#
+
+#user  nobody;
+#worker_processes 1;
+
+# Enables the use of JIT for regular expressions to speed-up their processing.
+pcre_jit on;
+
+#error_log  logs/error.log;
+#error_log  logs/error.log  notice;
+#error_log  logs/error.log  info;
+
+#pid        logs/nginx.pid;
+
+events {
+    worker_connections  1024;
+}
+
+
+http {
+    include       mime.types;
+    default_type  application/octet-stream;
+
+    # Enables or disables the use of underscores in client request header fields.
+    # When the use of underscores is disabled, request header fields whose names contain underscores are marked as invalid and become subject to the ignore_invalid_headers directive.
+    # underscores_in_headers off;
+
+    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
+    #                  '$status $body_bytes_sent "$http_referer" '
+    #                  '"$http_user_agent" "$http_x_forwarded_for"';
+
+    #access_log  logs/access.log  main;
+
+        # Log in JSON Format
+        # log_format nginxlog_json escape=json '{ "timestamp": "$time_iso8601", '
+        # '"remote_addr": "$remote_addr", '
+        #  '"body_bytes_sent": $body_bytes_sent, '
+        #  '"request_time": $request_time, '
+        #  '"response_status": $status, '
+        #  '"request": "$request", '
+        #  '"request_method": "$request_method", '
+        #  '"host": "$host",'
+        #  '"upstream_addr": "$upstream_addr",'
+        #  '"http_x_forwarded_for": "$http_x_forwarded_for",'
+        #  '"http_referrer": "$http_referer", '
+        #  '"http_user_agent": "$http_user_agent", '
+        #  '"http_version": "$server_protocol", '
+        #  '"nginx_access": true }';
+        # access_log /dev/stdout nginxlog_json;
+
+#     # See Move default writable paths to a dedicated directory (#119)
+#     # https://github.com/openresty/docker-openresty/issues/119
+    client_body_temp_path  /var/cache/nginx/client_temp;
+    proxy_temp_path        /var/cache/nginx/proxy_temp;
+    fastcgi_temp_path      /var/cache/nginx/fastcgi_temp;
+    uwsgi_temp_path        /var/cache/nginx/uwsgi_temp;
+    scgi_temp_path        /var/cache/nginx/scgi_temp;
+
+    sendfile        on;
+    #tcp_nopush     on;
+
+    #keepalive_timeout  0;
+    keepalive_timeout  65;
+
+    #gzip  on;
+    include /etc/nginx/conf.d/*.conf;
+
+    # Don't reveal OpenResty version to clients.
+    # server_tokens off;
+}
+
+include /etc/nginx/conf.d/*.main;
@@ -0,0 +1,58 @@
+# nginx.vh.default.conf  --  docker-openresty
+#
+# This file is installed to:
+#   `/etc/nginx/conf.d/default.conf`
+#
+# It tracks the `server` section of the upstream OpenResty's `nginx.conf`.
+#
+# This config (and any other configs in `etc/nginx/conf.d/`) is loaded by
+# default by the `include` directive in `/usr/local/openresty/nginx/conf/nginx.conf`.
+#
+# See https://github.com/openresty/docker-openresty/blob/master/README.md#nginx-config-files
+#
+
+
+server {
+    listen       80;
+    server_name  localhost;
+
+    #charset koi8-r;
+    #access_log  /var/log/nginx/host.access.log  main;
+
+    location / {
+        root   /usr/local/openresty/nginx/html;
+        index  index.html index.htm;
+    }
+
+    #error_page  404              /404.html;
+
+    # redirect server error pages to the static page /50x.html
+    #
+    error_page   500 502 503 504  /50x.html;
+    location = /50x.html {
+        root   /usr/local/openresty/nginx/html;
+    }
+
+    # proxy the PHP scripts to Apache listening on 127.0.0.1:80
+    #
+    #location ~ \.php$ {
+    #    proxy_pass   http://127.0.0.1;
+    #}
+
+    # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
+    #
+    #location ~ \.php$ {
+    #    root           /usr/local/openresty/nginx/html;
+    #    fastcgi_pass   127.0.0.1:9000;
+    #    fastcgi_index  index.php;
+    #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
+    #    include        fastcgi_params;
+    #}
+
+    # deny access to .htaccess files, if Apache's document root
+    # concurs with nginx's one
+    #
+    #location ~ /\.ht {
+    #    deny  all;
+    #}
+}