authentik/proxy.Dockerfile

# Stage 1: Build website
FROM --platform=${BUILDPLATFORM} docker.io/node:16 as web-builder

COPY ./web /static/

ENV NODE_ENV=production
RUN cd /static && npm i && npm run build-proxy

# Stage 2: Build
FROM docker.io/golang:1.17.6-bullseye AS builder

WORKDIR /go/src/goauthentik.io

COPY . .

ENV CGO_ENABLED=0
RUN go build -o /go/proxy ./cmd/proxy

# Stage 3: Run
FROM gcr.io/distroless/static-debian11:debug

LABEL org.opencontainers.image.url https://goauthentik.io
LABEL org.opencontainers.image.description goauthentik.io Proxy outpost image, see https://goauthentik.io for more info.
LABEL org.opencontainers.image.source https://github.com/goauthentik/authentik

ARG GIT_BUILD_HASH
ENV GIT_BUILD_HASH=$GIT_BUILD_HASH

COPY --from=builder /go/proxy /
COPY --from=web-builder /static/robots.txt /web/robots.txt
COPY --from=web-builder /static/security.txt /web/security.txt
COPY --from=web-builder /static/dist/ /web/dist/
COPY --from=web-builder /static/authentik/ /web/authentik/

HEALTHCHECK CMD [ "wget", "--spider", "http://localhost:9300/akprox/ping" ]

EXPOSE 9000 9300 9443

ENTRYPOINT ["/proxy"]
root: use go api client from github (#1378) Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-09-10 16:18:11 +00:00			`# Stage 1: Build website`
root: remove separate postgresql repo Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-11-22 09:07:23 +00:00			`FROM --platform=${BUILDPLATFORM} docker.io/node:16 as web-builder`
outpost/proxy: use common template for proxy error Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-09-07 14:44:15 +00:00
			`COPY ./web /static/`

			`ENV NODE_ENV=production`
web: add rollup config for proxy outpost Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-11-26 13:18:51 +00:00			`RUN cd /static && npm i && npm run build-proxy`
outpost/proxy: use common template for proxy error Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-09-07 14:44:15 +00:00
root: generate API Client in dockerfile instead of copying it (#942) * root: generate API Client in dockerfile instead of copying it Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outpost: fix docker build Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * root: fix path for docker build Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outpost: set explicit buildContext Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-05-30 15:28:58 +00:00			`# Stage 2: Build`
build(deps): bump golang from 1.17.5-bullseye to 1.17.6-bullseye (#2075) 2022-01-07 08:14:44 +00:00			`FROM docker.io/golang:1.17.6-bullseye AS builder`
Proxy v2 (#189) 2020-09-02 22:04:12 +00:00
root: initial merging of outpost and main project Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-06-16 10:02:02 +00:00			`WORKDIR /go/src/goauthentik.io`
Proxy v2 (#189) 2020-09-02 22:04:12 +00:00
root: initial merging of outpost and main project Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-06-16 10:02:02 +00:00			`COPY . .`
Proxy v2 (#189) 2020-09-02 22:04:12 +00:00
root: build outposts without CGO, use debug images for basic shell Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-11-02 09:11:51 +00:00			`ENV CGO_ENABLED=0`
root: generate API Client in dockerfile instead of copying it (#942) * root: generate API Client in dockerfile instead of copying it Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outpost: fix docker build Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * root: fix path for docker build Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outpost: set explicit buildContext Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-05-30 15:28:58 +00:00			`RUN go build -o /go/proxy ./cmd/proxy`
Proxy v2 (#189) 2020-09-02 22:04:12 +00:00
root: generate API Client in dockerfile instead of copying it (#942) * root: generate API Client in dockerfile instead of copying it Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outpost: fix docker build Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * root: fix path for docker build Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outpost: set explicit buildContext Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-05-30 15:28:58 +00:00			`# Stage 3: Run`
root: build outposts without CGO, use debug images for basic shell Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-11-02 09:11:51 +00:00			`FROM gcr.io/distroless/static-debian11:debug`
proxy: implement simple healthcheck 2020-09-19 09:43:22 +00:00
root: add opencontainer labels to dockerfiles Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-12-30 15:33:13 +00:00			`LABEL org.opencontainers.image.url https://goauthentik.io`
			`LABEL org.opencontainers.image.description goauthentik.io Proxy outpost image, see https://goauthentik.io for more info.`
			`LABEL org.opencontainers.image.source https://github.com/goauthentik/authentik`

outposts: fix git hash not being set in outposts Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-07-21 19:31:25 +00:00			`ARG GIT_BUILD_HASH`
			`ENV GIT_BUILD_HASH=$GIT_BUILD_HASH`

root: generate API Client in dockerfile instead of copying it (#942) * root: generate API Client in dockerfile instead of copying it Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outpost: fix docker build Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * root: fix path for docker build Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outpost: set explicit buildContext Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-05-30 15:28:58 +00:00			`COPY --from=builder /go/proxy /`
root: fix paths in proxy dockerfile Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-12-02 18:19:45 +00:00			`COPY --from=web-builder /static/robots.txt /web/robots.txt`
			`COPY --from=web-builder /static/security.txt /web/security.txt`
			`COPY --from=web-builder /static/dist/ /web/dist/`
			`COPY --from=web-builder /static/authentik/ /web/authentik/`
proxy: implement simple healthcheck 2020-09-19 09:43:22 +00:00
core: metrics v2 (#1370) * outposts: add ldap metrics, move ping to 9100 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outpost: add flow_executor metrics Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * use port 9300 for metrics, add core metrics port Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outposts/controllers/k8s: add service monitor creation support Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-09-09 13:52:24 +00:00			`HEALTHCHECK CMD [ "wget", "--spider", "http://localhost:9300/akprox/ping" ]`
proxy: implement simple healthcheck 2020-09-19 09:43:22 +00:00
outposts: don't map port 9300 on docker, only expose port Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-09-21 19:40:08 +00:00			`EXPOSE 9000 9300 9443`

Proxy v2 (#189) 2020-09-02 22:04:12 +00:00			`ENTRYPOINT ["/proxy"]`