wagon/back/admin.Dockerfile

FROM debian:latest
ARG PORT

# Install deps
RUN apt-get update && apt-get install --yes \
	sudo curl apache2 openssl wireguard-tools dnsutils ipv6calc jq \
	&& rm -rf /var/lib/apt/lists/*

# Create dirs and temp files
RUN mkdir /usr/lib/wagon /var/log/wagon /var/local/wagon
RUN touch /var/local/wagon/tokens
RUN chown -R www-data:www-data /usr/lib/wagon /var/log/wagon /var/local/wagon

# Configure apache
RUN a2enmod cgi rewrite
RUN sed -i "s/^Listen 80$/Listen ${PORT}/" /etc/apache2/ports.conf
RUN sed -i -e "s/^<VirtualHost \*:80>$/<VirtualHost *:${PORT}>/" \
	-e "s|DocumentRoot .*$|DocumentRoot /usr/lib/cgi-bin\n\tSetHandler cgi-script\n\tOptions +ExecCGI|" \
	/etc/apache2/sites-available/000-default.conf

# Allow http user to run these binaries as root with sudo
RUN echo "www-data ALL=(ALL:ALL) NOPASSWD: /usr/bin/wg, /usr/bin/openssl, /usr/bin/[, /usr/bin/tee, /bin/cat, /bin/mkdir, /bin/rm, /bin/chmod, /bin/chgrp" \
	| sudo EDITOR='tee -a' visudo

# Copy over CGIs and libs
COPY admin_peer.cgi /usr/lib/cgi-bin/peer
COPY admin_user.cgi /usr/lib/cgi-bin/user
# TODO: Copy only needed libs
COPY lib/ /usr/lib/wagon/

# Run time!
EXPOSE ${PORT}
CMD ["apachectl", "-D", "FOREGROUND"]