view docker/prosody-e2e/Dockerfile @ 3532:ab72b8ac3bd2

component file sharing: forbid jingle upload by entities which are not in allowed hosts
author Goffi <goffi@goffi.org>
date Wed, 05 May 2021 15:41:19 +0200
parents 73e04040d577
children a6811543c7ff
line wrap: on
line source

FROM prosody/prosody

LABEL maintainer="Goffi <tmp_dockerfiles@goffi.org>"

ARG DEBIAN_FRONTEND=noninteractive

# we synchronize tls-cert group with the one in libervia-web/libervia-backend
RUN addgroup tls-cert --gid 9999 && adduser prosody tls-cert && \
    # we want third party modules
    apt-get update && apt-get install -y --no-install-recommends mercurial && \
    mkdir -p /usr/local/share/prosody && \
    hg clone https://hg.prosody.im/prosody-modules /usr/local/share/prosody/modules && \
    chown -R prosody:prosody /usr/local/share/prosody

COPY --chown=root:prosody prosody.cfg.lua /etc/prosody/prosody.cfg.lua
COPY --chown=root:tls-cert certificates/server1.test/cert.pem /usr/share/libervia/certificates/server1.test.pem
COPY --chown=root:tls-cert certificates/server1.test/key.pem /usr/share/libervia/certificates/server1.test-key.pem

# we add exec to handle properly signals, this is missing upstream
# FIXME: to be removed when new images are generated with
#        https://github.com/prosody/prosody-docker/pull/65
RUN sed -i "s/^runuser -u prosody/exec \0/" /entrypoint.sh