authelia/Dockerfile

# ===================================
# ===== Authelia official image =====
# ===================================
FROM alpine:3.14.2

ARG TARGETOS
ARG TARGETARCH

WORKDIR /app

# Set environment variables
ENV PATH="/app:${PATH}" \
    PUID=0 \
    PGID=0

RUN \
apk --no-cache add ca-certificates su-exec tzdata

COPY LICENSE .healthcheck.env entrypoint.sh healthcheck.sh ./

RUN \
chmod 0666 /app/.healthcheck.env

COPY authelia-${TARGETOS}-${TARGETARCH}-musl ./authelia

EXPOSE 9091

VOLUME /config

ENTRYPOINT ["/app/entrypoint.sh"]
CMD ["--config", "/config/configuration.yml"]
HEALTHCHECK --interval=30s --timeout=3s --start-period=1m CMD /app/healthcheck.sh
Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc. 2019-11-02 01:31:51 +07:00			`# ===================================`
			`# ===== Authelia official image =====`
			`# ===================================`
build(deps): update alpine docker tag to v3.14.2 (#2325) 2021-08-28 06:13:07 +07:00			`FROM alpine:3.14.2`
Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc. 2019-11-02 01:31:51 +07:00
feat: builds with gox and buildx (#2381) * feat: builds with gox and buildx This change builds all of Authelia respective binaries in parallel within a single step and distributes as necessary to subsequent steps, we now also build and distribute for the following OS/Architecture: freebsd/amd64. Our CI/CD pipeline now also utilises docker buildx as a default for builds and pushes. * refactor: clean up docker helper * Remove `authelia-scripts docker push-image` command as all pushes will be performed with buildx and manifests * Rename the --arch flag to --container * Add Dockerfile.dev for users that want to build an Authelia container from source without utilising suites * Set Dockerfile.dev as default for `authelia-scripts docker build` command * refactor: variant -> container 2021-09-16 19:39:18 +07:00			`ARG TARGETOS`
			`ARG TARGETARCH`

[BUGFIX] Fix Dockerfile WORKDIR (#1392) The WORKDIR needs to be set early to ensure that the files are copied into the appropriate directory. This is a minor regression that was introduced in af2ae328e7cb810d2282ae615791cc10b840b9a9. 2020-10-19 07:24:24 +07:00			`WORKDIR /app`
Use pure implementation of crypt to generate and check password hashes. This allows to remove the dependency to libc. 2019-11-02 01:31:51 +07:00
feat: builds with gox and buildx (#2381) * feat: builds with gox and buildx This change builds all of Authelia respective binaries in parallel within a single step and distributes as necessary to subsequent steps, we now also build and distribute for the following OS/Architecture: freebsd/amd64. Our CI/CD pipeline now also utilises docker buildx as a default for builds and pushes. * refactor: clean up docker helper * Remove `authelia-scripts docker push-image` command as all pushes will be performed with buildx and manifests * Rename the --arch flag to --container * Add Dockerfile.dev for users that want to build an Authelia container from source without utilising suites * Set Dockerfile.dev as default for `authelia-scripts docker build` command * refactor: variant -> container 2021-09-16 19:39:18 +07:00			`# Set environment variables`
			`ENV PATH="/app:${PATH}" \`
			`PUID=0 \`
			`PGID=0`

			`RUN \`
			`apk --no-cache add ca-certificates su-exec tzdata`

			`COPY LICENSE .healthcheck.env entrypoint.sh healthcheck.sh ./`

			`RUN \`
			`chmod 0666 /app/.healthcheck.env`
First commit with tests 2016-12-10 07:47:58 +07:00
feat: hardened authelia binaries (#2410) * feat: hardened authelia binaries This change ensures that all Authelia binaries which are compiled and distributed are hardened with the following standards: * RELRO * Stack canary * NX * PIE/ASLR * Stripped RPATH AND RUNPATH * Stripped Symbols * Fortify The musl variants currently [do not support Fortify](https://wiki.musl-libc.org/future-ideas.html#Fortify). * refactor: docker pull for authelia/crossbuild in background 2021-09-26 09:08:47 +07:00			`COPY authelia-${TARGETOS}-${TARGETARCH}-musl ./authelia`
Edit nginx configuration and add redirection during login and logout 2016-12-18 01:36:41 +07:00
Fix e2e test with minimal configuration. 2019-01-30 22:47:03 +07:00			`EXPOSE 9091`
Expose port 80 in the dockerfile 2017-01-13 05:27:53 +07:00
[FEATURE] Docker simplification and configuration generation (#1113) * [FEATURE] Docker simplification and configuration generation The Authelia binary now will attempt to generate configuration based on the latest template assuming that the config location specified on startup does not exist. If a file based backend is selected and the backend cannot be found similarly it will generate a `user_database.yml` based a template. This will allow more seamless bootstrapping of an environment no matter the deployment method. We have also squashed the Docker volume requirement down to just `/config` thus removing the requirement for `/var/lib/authelia` this is primarily in attempts to simplify the Docker deployment. Users with the old volume mappings have two options: 1. Change their mappings to conform to `/config` 2. Change the container entrypoint from `authelia --config /config/configuration.yml` to their old mapping * Adjust paths relative to `/etc/authelia` and simplify to single volume for compose * Add generation for file backend based user database * Refactor Docker volumes and paths to /config * Refactor Docker WORKDIR to /app * Fix integration tests * Update BREAKING.md for v4.20.0 * Run go mod tidy * Fix log_file_path in miscellaneous.md docs * Generate config and userdb with 0600 permissions * Fix log_file_path in config.template.yml 2020-06-17 13:25:35 +07:00			`VOLUME /config`
Use filesystem data store to save u2f meta info 2017-01-22 02:24:35 +07:00
build: optimize docker builds (#2059) * build: optimize docker builds This change is so that each of the COPY/RUN steps occurs in a single layer which should theoretically decrease build times. * build: include license and move scripts 2021-06-06 11:46:31 +07:00			`ENTRYPOINT ["/app/entrypoint.sh"]`
[FEATURE] Container privilege de-escalation (#1370) * support for running as non-root * forgot to save file * removed write perms for user on entrypoint script * preserve existing user behavior * fix entrypoint permissions to account for non-root user * typo in chmod on line 63 * better entrypoint script; moved to root * execute bit * support for running as non-root * forgot to save file * removed write perms for user on entrypoint script * preserve existing user behavior * fix entrypoint permissions to account for non-root user * typo in chmod on line 63 * better entrypoint script; moved to root * execute bit * very rough draft documentation * added missing header * typo changes -> changed * Update entrypoint.sh Co-authored-by: Amir Zarrinkafsh <nightah@me.com> * Apply suggestions from code review looks good Co-authored-by: Amir Zarrinkafsh <nightah@me.com> 2020-10-19 06:12:21 +07:00			`CMD ["--config", "/config/configuration.yml"]`
build: optimize docker builds (#2059) * build: optimize docker builds This change is so that each of the COPY/RUN steps occurs in a single layer which should theoretically decrease build times. * build: include license and move scripts 2021-06-06 11:46:31 +07:00			`HEALTHCHECK --interval=30s --timeout=3s --start-period=1m CMD /app/healthcheck.sh`