authentik/proxy.Dockerfile

# Stage 1: Build website
FROM --platform=${BUILDPLATFORM} docker.io/node:18 as web-builder

COPY ./web /static/

ENV NODE_ENV=production
RUN cd /static && npm ci && npm run build-proxy

# Stage 2: Build
FROM docker.io/golang:1.20.3-bullseye AS builder

WORKDIR /go/src/goauthentik.io

COPY . .

ENV CGO_ENABLED=0
RUN go build -o /go/proxy ./cmd/proxy

# Stage 3: Run
FROM gcr.io/distroless/static-debian11:debug

LABEL org.opencontainers.image.url https://goauthentik.io
LABEL org.opencontainers.image.description goauthentik.io Proxy outpost image, see https://goauthentik.io for more info.
LABEL org.opencontainers.image.source https://github.com/goauthentik/authentik

ARG GIT_BUILD_HASH
ENV GIT_BUILD_HASH=$GIT_BUILD_HASH

COPY --from=builder /go/proxy /
COPY --from=web-builder /static/robots.txt /web/robots.txt
COPY --from=web-builder /static/security.txt /web/security.txt
COPY --from=web-builder /static/dist/ /web/dist/
COPY --from=web-builder /static/authentik/ /web/authentik/

HEALTHCHECK --interval=5s --retries=20 --start-period=3s CMD [ "/proxy", "healthcheck" ]

EXPOSE 9000 9300 9443

USER 1000

ENTRYPOINT ["/proxy"]
root: use go api client from github (#1378) Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-09-10 16:18:11 +00:00			`# Stage 1: Build website`
build(deps): bump node from 16 to 18 (#2753) Bumps node from 16 to 18. --- updated-dependencies: - dependency-name: node dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 2022-04-25 10:30:08 +00:00			`FROM --platform=${BUILDPLATFORM} docker.io/node:18 as web-builder`
outpost/proxy: use common template for proxy error Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-09-07 14:44:15 +00:00
			`COPY ./web /static/`

			`ENV NODE_ENV=production`
root: use npm ci Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2022-04-14 20:30:44 +00:00			`RUN cd /static && npm ci && npm run build-proxy`
outpost/proxy: use common template for proxy error Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-09-07 14:44:15 +00:00
root: generate API Client in dockerfile instead of copying it (#942) * root: generate API Client in dockerfile instead of copying it Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outpost: fix docker build Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * root: fix path for docker build Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outpost: set explicit buildContext Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-05-30 15:28:58 +00:00			`# Stage 2: Build`
core: bump golang from 1.20.2-bullseye to 1.20.3-bullseye (#5175) Bumps golang from 1.20.2-bullseye to 1.20.3-bullseye. --- updated-dependencies: - dependency-name: golang dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 2023-04-05 09:31:47 +00:00			`FROM docker.io/golang:1.20.3-bullseye AS builder`
Proxy v2 (#189) 2020-09-02 22:04:12 +00:00
root: initial merging of outpost and main project Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-06-16 10:02:02 +00:00			`WORKDIR /go/src/goauthentik.io`
Proxy v2 (#189) 2020-09-02 22:04:12 +00:00
root: initial merging of outpost and main project Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-06-16 10:02:02 +00:00			`COPY . .`
Proxy v2 (#189) 2020-09-02 22:04:12 +00:00
root: build outposts without CGO, use debug images for basic shell Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-11-02 09:11:51 +00:00			`ENV CGO_ENABLED=0`
root: generate API Client in dockerfile instead of copying it (#942) * root: generate API Client in dockerfile instead of copying it Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outpost: fix docker build Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * root: fix path for docker build Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outpost: set explicit buildContext Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-05-30 15:28:58 +00:00			`RUN go build -o /go/proxy ./cmd/proxy`
Proxy v2 (#189) 2020-09-02 22:04:12 +00:00
root: generate API Client in dockerfile instead of copying it (#942) * root: generate API Client in dockerfile instead of copying it Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outpost: fix docker build Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * root: fix path for docker build Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outpost: set explicit buildContext Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-05-30 15:28:58 +00:00			`# Stage 3: Run`
root: build outposts without CGO, use debug images for basic shell Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-11-02 09:11:51 +00:00			`FROM gcr.io/distroless/static-debian11:debug`
proxy: implement simple healthcheck 2020-09-19 09:43:22 +00:00
root: add opencontainer labels to dockerfiles Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-12-30 15:33:13 +00:00			`LABEL org.opencontainers.image.url https://goauthentik.io`
			`LABEL org.opencontainers.image.description goauthentik.io Proxy outpost image, see https://goauthentik.io for more info.`
			`LABEL org.opencontainers.image.source https://github.com/goauthentik/authentik`

outposts: fix git hash not being set in outposts Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-07-21 19:31:25 +00:00			`ARG GIT_BUILD_HASH`
			`ENV GIT_BUILD_HASH=$GIT_BUILD_HASH`

root: generate API Client in dockerfile instead of copying it (#942) * root: generate API Client in dockerfile instead of copying it Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outpost: fix docker build Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * root: fix path for docker build Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outpost: set explicit buildContext Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-05-30 15:28:58 +00:00			`COPY --from=builder /go/proxy /`
root: fix paths in proxy dockerfile Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-12-02 18:19:45 +00:00			`COPY --from=web-builder /static/robots.txt /web/robots.txt`
			`COPY --from=web-builder /static/security.txt /web/security.txt`
			`COPY --from=web-builder /static/dist/ /web/dist/`
			`COPY --from=web-builder /static/authentik/ /web/authentik/`
proxy: implement simple healthcheck 2020-09-19 09:43:22 +00:00
root: optimise healthchecks (#5337) * tests: remove redundant healthchecks Signed-off-by: Jens Langhammer <jens@goauthentik.io> * internal: do healthcheck within proxy instead of wget to use correct port Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix docs Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix tags Signed-off-by: Jens Langhammer <jens@goauthentik.io> --------- Signed-off-by: Jens Langhammer <jens@goauthentik.io> 2023-04-21 10:32:48 +00:00			`HEALTHCHECK --interval=5s --retries=20 --start-period=3s CMD [ "/proxy", "healthcheck" ]`
proxy: implement simple healthcheck 2020-09-19 09:43:22 +00:00
outposts: don't map port 9300 on docker, only expose port Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> 2021-09-21 19:40:08 +00:00			`EXPOSE 9000 9300 9443`

outposts: run containers as non root (#5212) Signed-off-by: Jens Langhammer <jens@goauthentik.io> 2023-04-09 19:39:07 +00:00			`USER 1000`

Proxy v2 (#189) 2020-09-02 22:04:12 +00:00			`ENTRYPOINT ["/proxy"]`