FROM alpine:latest

RUN \
  apk -U upgrade && \
  apk add nginx curl logrotate tini && \
  mkdir -p /wwwroot /logs && \
  chown -R nginx:www-data /wwwroot /logs && \
  chmod -R a-x,a=rX,ug+w  /wwwroot /logs

COPY docker/rootfs /
COPY --chown=nginx:www-data public/ /wwwroot/
RUN find /wwwroot/ -type d -exec chmod 755 {} \; -o -type f -exec chmod 644 {} \;

# config test
RUN nginx -t

HEALTHCHECK --timeout=10s CMD curl --silent --fail -o /dev/null http://127.0.0.1:80/

ENTRYPOINT ["/sbin/tini", "--"]
CMD [ "/bin/sh", "/app/entrypoint.sh" ]