feat: add nginx

Dockerfile

@@ -4,7 +4,7 @@ RUN apk update
 
 RUN apk upgrade
 
-RUN apk add --no-cache ffmpeg mimalloc2 py3-pillow
+RUN apk add --no-cache ffmpeg mimalloc2 nginx py3-pillow
 
 RUN adduser --disabled-password --uid 1000 user
 
@@ -20,44 +20,107 @@ WORKDIR $HOME/app
 
 RUN pip install --no-cache-dir copyparty
 
+RUN cat >/home/user/app/start.sh <<'EOF_START'
+#!/bin/sh
+set -eu
+
+if [ -z "${ADMIN_PASSWORD:-}" ]; then
+  echo "ERROR: ADMIN_PASSWORD is not found."
+  exit 1
+fi
+
+if [ -z "${BASE_DOWNLOAD_URL:-}" ]; then
+  echo "ERROR: BASE_DOWNLOAD_URL is not found."
+  exit 1
+fi
+
+BASE_DOWNLOAD_URL="${BASE_DOWNLOAD_URL%/}"
+
+cat > /home/user/app/copyparty.conf <<EOF
+[global]
+  dedup
+  e2dsa
+  hist: /data/.hist
+  no-robots
+  no-thumb
+  q
+  rproxy: -1
+  safe-dedup: 1
+  xf-proto-fb: https
+  xff-src: lan
+
+[accounts]
+  admin: ${ADMIN_PASSWORD}
+
+[/]
+  /data
+  accs:
+    r: *
+    A: admin
+EOF
+
+cat > /home/user/app/nginx.conf <<EOF
+pid /tmp/nginx.pid;
+
+events {
+  worker_connections 1024;
+}
+
+http {
+  include /etc/nginx/mime.types;
+  default_type application/octet-stream;
+  access_log off;
+  error_log /dev/stderr warn;
+  sendfile on;
+
+  client_body_temp_path /tmp/nginx-client-body;
+  proxy_temp_path /tmp/nginx-proxy;
+  fastcgi_temp_path /tmp/nginx-fastcgi;
+  uwsgi_temp_path /tmp/nginx-uwsgi;
+  scgi_temp_path /tmp/nginx-scgi;
+
+  map \$http_upgrade \$connection_upgrade {
+    default upgrade;
+    "" close;
+  }
+
+  server {
+    listen 7860;
+    server_name _;
+    root /data;
+
+    location / {
+      set \$redirect_file "";
+      if (\$request_method ~ ^(GET|HEAD)$) { set \$redirect_file A; }
+      if (\$args = "") { set \$redirect_file \${redirect_file}B; }
+      if (-f \$request_filename) { set \$redirect_file \${redirect_file}C; }
+      if (\$redirect_file = ABC) { return 302 ${BASE_DOWNLOAD_URL}\$request_uri; }
+
+      proxy_http_version 1.1;
+      proxy_pass http://127.0.0.1:3923;
+      proxy_request_buffering off;
+      proxy_set_header Connection \$connection_upgrade;
+      proxy_set_header Host \$host;
+      proxy_set_header Upgrade \$http_upgrade;
+      proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
+      proxy_set_header X-Forwarded-Host \$host;
+      proxy_set_header X-Forwarded-Proto https;
+      proxy_set_header X-Real-IP \$remote_addr;
+    }
+  }
+}
+EOF
+
+python -m copyparty -c /home/user/app/copyparty.conf &
+exec nginx -c /home/user/app/nginx.conf -g "daemon off;"
+EOF_START
+
+RUN chmod +x /home/user/app/start.sh
+
 RUN chown -R user:user $HOME
 
 USER user
 
 EXPOSE 7860
 
-CMD ["/bin/sh", "-c", "\
-  if [ -z \"$ADMIN_PASSWORD\" ]; then \
-    echo 'ERROR: ADMIN_PASSWORD is not found.'; \
-    exit 1; \
-  fi; \
-  cat > /home/user/app/copyparty.conf <<EOF\n\
-[global]\n\
-  dedup\n\
-  e2dsa\n\
-  hash-mt: 0\n\
-  hist: /data/.hist\n\
-  i: 0.0.0.0\n\
-  mtag-mt: 1\n\
-  no-dirsz\n\
-  no-htp\n\
-  no-robots\n\
-  no-thumb\n\
-  p: 7860\n\
-  q\n\
-  rproxy: -1\n\
-  safe-dedup: 1\n\
-  xf-proto-fb: https\n\
-  xff-src: lan\n\
-\n\
-[accounts]\n\
-  admin: $ADMIN_PASSWORD\n\
-\n\
-[/]\n\
-  /data\n\
-  accs:\n\
-    r: *\n\
-    A: admin\n\
-EOF\n\
-  python -m copyparty -c /home/user/app/copyparty.conf \
-"]
+CMD ["/bin/sh", "/home/user/app/start.sh"]