blob: 5b5e37feb874968458b82ed64795295ec7706341 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
|
# ========================================
# ===== Build image for the frontend =====
# ========================================
FROM node:23-alpine@sha256:dc4d20572e425f9d4c68a6f9c382fbcfec3fa2f8ef0b12cb1d96feabdb479a48 AS builder-frontend
WORKDIR /node/src/app
COPY --link .local /root/.local
COPY --link web ./
# Install the dependencies and build
RUN \
yarn global add pnpm && \
pnpm install --frozen-lockfile && \
pnpm coverage
# =======================================
# ===== Build image for the backend =====
# =======================================
FROM golang:1.24.1-bookworm@sha256:d7d795d0a9f51b00d9c9bfd17388c2c626004a50c6ed7c581e095122507fe1ab AS builder-backend
WORKDIR /go/src/app
COPY --link go.mod go.sum ./
RUN \
echo ">> Downloading go modules..." && \
go mod download
COPY --link / ./
# Prepare static files to be embedded in Go binary
COPY --link --from=builder-frontend /node/src/internal/server/public_html internal/server/public_html
ARG LDFLAGS_EXTRA
RUN \
mv api internal/server/public_html/api && \
echo ">> Starting go build (coverage via -cover)..." && \
CGO_ENABLED=1 CGO_CPPFLAGS="-D_FORTIFY_SOURCE=2 -fstack-protector-strong" CGO_LDFLAGS="-Wl,-z,relro,-z,now" go build -cover -covermode=atomic \
-ldflags "${LDFLAGS_EXTRA}" -o authelia ./cmd/authelia
# ===================================
# ===== Authelia official image =====
# ===================================
FROM authelia/base:latest
WORKDIR /app
COPY --link --from=builder-backend /go/src/app/authelia /go/src/app/LICENSE /go/src/app/healthcheck.sh ./
COPY --link --from=builder-backend --chmod=666 /go/src/app/.healthcheck.env ./
EXPOSE 9091
ENV \
PATH="/app:${PATH}" \
GOCOVERDIR="/authelia/coverage/" \
X_AUTHELIA_CONFIG="/config/configuration.yml"
CMD ["authelia"]
HEALTHCHECK --interval=30s --timeout=3s CMD /app/healthcheck.sh
|
