34 lines
1.2 KiB
Docker
34 lines
1.2 KiB
Docker
FROM debian:latest
|
|
ARG PORT
|
|
|
|
# Install deps
|
|
RUN apt-get update && apt-get install --yes \
|
|
sudo curl apache2 openssl wireguard-tools dnsutils ipv6calc jq iproute2 \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Create dirs and temp files
|
|
RUN mkdir /usr/lib/wagon /var/log/wagon /var/local/wagon
|
|
RUN touch /var/local/wagon/tokens
|
|
RUN chown -R www-data:www-data /usr/lib/wagon /var/log/wagon /var/local/wagon
|
|
|
|
# Configure apache
|
|
RUN a2enmod cgi rewrite
|
|
RUN sed -i "s/^Listen 80$/Listen ${PORT}/" /etc/apache2/ports.conf
|
|
RUN sed -i -e "s/^<VirtualHost \*:80>$/<VirtualHost *:${PORT}>/" \
|
|
-e "s|DocumentRoot .*$|DocumentRoot /usr/lib/cgi-bin\n\tSetHandler cgi-script\n\tOptions +ExecCGI|" \
|
|
/etc/apache2/sites-available/000-default.conf
|
|
|
|
# Allow http user to run these binaries as root with sudo
|
|
RUN echo "www-data ALL=(ALL:ALL) NOPASSWD: /usr/bin/wg, /usr/bin/wg-quick, /usr/bin/openssl, /usr/bin/[, /usr/bin/tee, /bin/cat, /bin/mkdir, /bin/rm, /bin/chmod, /bin/chgrp" \
|
|
| sudo EDITOR='tee -a' visudo
|
|
|
|
# Copy over CGIs and libs
|
|
COPY admin_peer.cgi /usr/lib/cgi-bin/peer
|
|
COPY admin_user.cgi /usr/lib/cgi-bin/user
|
|
# TODO: Copy only needed libs
|
|
COPY lib/ /usr/lib/wagon/
|
|
|
|
# Run time!
|
|
EXPOSE ${PORT}
|
|
CMD ["apachectl", "-D", "FOREGROUND"]
|