FROM alpine:3.24

RUN apk add --no-cache bash ca-certificates gettext nginx tzdata && \
    rm -rf /var/cache/apk/* && \
    mkdir -p /tmp/nginx

STOPSIGNAL SIGINT
EXPOSE 8080

WORKDIR /usr/share/nginx/html

COPY docker/default.conf /etc/nginx/http.d/default.conf
COPY docker/nginx.conf /etc/nginx/nginx.conf
COPY docker/rootless.conf /etc/nginx/http.d/rootless.conf
COPY docker/init_react_envs.sh /usr/local/init_react_envs.sh
COPY out/ /usr/share/nginx/html/

RUN sed -i \
      -e 's/listen 80 default_server;/listen 8080 default_server;/' \
      -e 's/listen \[::\]:80 default_server;/listen [::]:8080 default_server;/' \
      /etc/nginx/http.d/default.conf && \
    sed -i '/^user nginx;$/d' /etc/nginx/nginx.conf && \
    chmod +x /usr/local/init_react_envs.sh && \
    chgrp -R 0 /etc/nginx/http.d /usr/share/nginx/html /tmp/nginx && \
    chmod -R g=u /etc/nginx/http.d /usr/share/nginx/html /tmp/nginx

USER 10001:0
ENTRYPOINT ["/usr/local/init_react_envs.sh"]
CMD ["/usr/sbin/nginx", "-e", "/dev/stderr", "-g", "pid /tmp/nginx.pid;"]