eightball/all-in-one
1
0
Fork 0
mirror of https://github.com/nextcloud/all-in-one.git synced 2025-12-19 22:16:49 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 10

Merge pull request #2870 from nextcloud/enh/2506/domaincheck

Browse source 
make domaincheck container read-only
This commit is contained in:
Simon L 2023-07-13 12:13:28 +02:00 • committed by GitHub
commit 554cb34d74
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 11 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

7
Containers/domaincheck/Dockerfile
View file

@ -3,10 +3,11 @@ RUN set -ex; \
apk add --no-cache bash lighttpd netcat-openbsd; \ apk add --no-cache bash lighttpd netcat-openbsd; \
adduser -S www-data -G www-data; \ adduser -S www-data -G www-data; \
rm -rf /etc/lighttpd/lighttpd.conf; \ rm -rf /etc/lighttpd/lighttpd.conf; \
chmod +r -R /etc/lighttpd; \ chmod 777 -R /etc/lighttpd; \
mkdir -p /var/www/domaincheck; \ mkdir -p /var/www/domaincheck; \
chown www-data:www-data -R /var/www chown www-data:www-data -R /var/www; \
COPY --chown=www-data:www-data lighttpd.conf /etc/lighttpd/lighttpd.conf chmod 777 -R /var/www/domaincheck
COPY --chown=www-data:www-data lighttpd.conf /lighttpd.conf
COPY --chmod=775 start.sh /start.sh COPY --chmod=775 start.sh /start.sh

2
Containers/domaincheck/start.sh
View file

@ -11,7 +11,7 @@ if [ -z "$APACHE_PORT" ]; then
export APACHE_PORT="443" export APACHE_PORT="443"
fi fi
CONF_FILE="$(sed "s|ipv6-placeholder|\[::\]:$APACHE_PORT|" /etc/lighttpd/lighttpd.conf)" CONF_FILE="$(sed "s|ipv6-placeholder|\[::\]:$APACHE_PORT|" /lighttpd.conf)"
echo "$CONF_FILE" > /etc/lighttpd/lighttpd.conf echo "$CONF_FILE" > /etc/lighttpd/lighttpd.conf
# Check config file # Check config file

7
php/containers.json
View file

@ -454,7 +454,12 @@
"secrets": [ "secrets": [
"INSTANCE_ID" "INSTANCE_ID"
], ],
"stop_grace_period": 1 "stop_grace_period": 1,
"read_only": true,
"tmpfs": [
"/etc/lighttpd",
"/var/www/domaincheck"
]
}, },
{ {
"container_name": "nextcloud-aio-clamav", "container_name": "nextcloud-aio-clamav",