FROM nginx:1.27.4-bookworm
RUN apt-get update \
    && apt-get install -y --no-install-recommends gettext-base curl ca-certificates \
    && rm -rf /var/lib/apt/lists/* \
    && mkdir -p /etc/nginx/generated /var/www/certbot /usr/share/nginx/html \
    && chown -R nginx:nginx /etc/nginx/generated /var/cache/nginx /var/run
COPY nginx.conf.template /etc/nginx/templates-src/nginx.conf.template
COPY templates /etc/nginx/templates-src/sites
COPY snippets /etc/nginx/snippets
COPY scripts/entrypoint.sh /usr/local/bin/han-nginx-entrypoint
RUN sed -i 's/\r$//' /usr/local/bin/han-nginx-entrypoint \
    && chmod 0555 /usr/local/bin/han-nginx-entrypoint \
    && find /etc/nginx/templates-src /etc/nginx/snippets -type f -exec chmod 0444 {} +
ENTRYPOINT ["/usr/local/bin/han-nginx-entrypoint"]