FROM node:20-alpine AS build

WORKDIR /app

COPY . /app

RUN set -ex \

# Build JS-Application

&& npm install --production \

# Generate SSL-certificate (for HTTPS)

&& apk --no-cache add openssl \

&& openssl req -x509 -newkey rsa:4096 -sha256 -days 3650 -nodes -keyout privkey.pem -out fullchain.pem \

-subj "/C=GB/ST=London/L=London/O=Mendhak/CN=my.example.com" \

-addext "subjectAltName=DNS:my.example.com,DNS:my.example.net,IP:192.168.50.108,IP:127.0.0.1" \

&& apk del openssl \

&& rm -rf /var/cache/apk/* \

# Delete unnecessary files

&& rm package* \

# Correct User's file access

&& chown -R node:node /app \

&& chmod +r /app/privkey.pem

FROM node:20-alpine AS final

LABEL \

org.opencontainers.image.title="http-https-echo" \

org.opencontainers.image.description="Docker image that echoes request data as JSON; listens on HTTP/S, with various extra features, useful for debugging." \

org.opencontainers.image.url="https://github.com/mendhak/docker-http-https-echo" \

org.opencontainers.image.documentation="https://github.com/mendhak/docker-http-https-echo/blob/master/README.md" \

org.opencontainers.image.source="https://github.com/mendhak/docker-http-https-echo" \

org.opencontainers.image.licenses="MIT"

WORKDIR /app

COPY --from=build /app /app

ENV HTTP_PORT=8080 HTTPS_PORT=8443

EXPOSE $HTTP_PORT $HTTPS_PORT

USER 1000

CMD ["node", "./index.js"]