mirror of
https://github.com/nextcloud/all-in-one.git
synced 2024-11-15 19:44:31 +08:00
75 lines
2 KiB
Docker
75 lines
2 KiB
Docker
FROM nats:2.9.19-scratch as nats
|
|
FROM strukturag/nextcloud-spreed-signaling:1.1.3 as signaling
|
|
FROM coturn/coturn:4.6.2-alpine3.18
|
|
USER root
|
|
|
|
COPY --from=nats /nats-server /usr/local/bin/nats-server
|
|
COPY --from=signaling /usr/bin/nextcloud-spreed-signaling /usr/local/bin/nextcloud-spreed-signaling
|
|
|
|
COPY --chmod=775 start.sh /start.sh
|
|
COPY --chmod=664 supervisord.conf /supervisord.conf
|
|
|
|
RUN set -ex; \
|
|
apk add --no-cache \
|
|
ca-certificates \
|
|
tzdata \
|
|
bash \
|
|
janus-gateway \
|
|
openssl \
|
|
supervisor \
|
|
bind-tools \
|
|
netcat-openbsd \
|
|
shadow \
|
|
util-linux \
|
|
build-base \
|
|
wget \
|
|
lua5.3-dev \
|
|
luarocks5.3; \
|
|
useradd --system talk; \
|
|
luarocks-5.3 install luajson; \
|
|
luarocks-5.3 install ansicolors; \
|
|
rename -v ".jcfg.sample" ".jcfg" /etc/janus/*.sample; \
|
|
apk del --no-cache \
|
|
shadow \
|
|
util-linux \
|
|
build-base \
|
|
wget \
|
|
lua5.3-dev \
|
|
luarocks5.3; \
|
|
\
|
|
# Give root a random password
|
|
echo "root:$(openssl rand -base64 12)" | chpasswd; \
|
|
\
|
|
touch \
|
|
/etc/nats.conf; \
|
|
echo "listen: 127.0.0.1:4222" | tee /etc/nats.conf; \
|
|
mkdir -p \
|
|
/var/tmp \
|
|
/conf \
|
|
/var/lib/turn \
|
|
/var/log/supervisord \
|
|
/var/lib/turn \
|
|
/var/run/supervisord; \
|
|
chown talk:talk -R \
|
|
/usr \
|
|
/etc/janus \
|
|
/etc/nats.conf \
|
|
/var/lib/turn \
|
|
/var/log/supervisord \
|
|
/var/run/supervisord; \
|
|
chmod 777 -R \
|
|
/tmp \
|
|
/conf \
|
|
/var/run/supervisord \
|
|
/var/lib/turn \
|
|
/var/log/supervisord;
|
|
|
|
# Set default talk port https://github.com/nextcloud/all-in-one/issues/1011
|
|
ENV TALK_PORT=3478
|
|
|
|
USER talk
|
|
ENTRYPOINT ["/start.sh"]
|
|
CMD ["supervisord", "-c", "/supervisord.conf"]
|
|
|
|
HEALTHCHECK CMD (nc -z localhost 8081 && nc -z localhost 8188 && nc -z localhost 4222 && nc -z localhost "$TALK_PORT" && nc -z "$NC_DOMAIN" "$TALK_PORT") || exit 1
|
|
LABEL com.centurylinklabs.watchtower.enable="false"
|