mirror of
https://github.com/swissmakers/fail2ban-ui.git
synced 2026-04-11 13:47:05 +02:00
Release first dockerfile, first documentation etc.. Update will follow
This commit is contained in:
58
Dockerfile
Normal file
58
Dockerfile
Normal file
@@ -0,0 +1,58 @@
|
||||
# =========================================
|
||||
# STAGE 1: Build Fail2Ban UI Binary
|
||||
# =========================================
|
||||
FROM golang:1.22.9 AS builder
|
||||
|
||||
WORKDIR /app
|
||||
|
||||
# Copy module files and download dependencies first
|
||||
COPY go.mod go.sum ./
|
||||
RUN go mod download
|
||||
|
||||
# Copy the application source code
|
||||
COPY . .
|
||||
|
||||
# Build Go application (as static binary)
|
||||
RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o fail2ban-ui ./cmd/server/main.go
|
||||
|
||||
# ===================================
|
||||
# STAGE 2: Standalone UI Version
|
||||
# ===================================
|
||||
FROM alpine:latest AS standalone-ui
|
||||
|
||||
# Install required container dependencies
|
||||
RUN apk --update --no-cache add \
|
||||
bash curl wget whois tzdata jq ca-certificates htop fail2ban geoip \
|
||||
&& adduser -D -u 1000 -G root fail2ban
|
||||
|
||||
RUN mkdir -p /app /config \
|
||||
/etc/fail2ban/jail.d \
|
||||
/etc/fail2ban/filter.d \
|
||||
/etc/fail2ban/action.d \
|
||||
/var/run/fail2ban \
|
||||
/usr/share/GeoIP \
|
||||
&& touch /etc/fail2ban/jail.local \
|
||||
&& chown -R fail2ban:0 /app /config /etc/fail2ban /var/run/fail2ban
|
||||
|
||||
# Set working directory
|
||||
WORKDIR /config
|
||||
|
||||
# Copy Fail2Ban UI binary and templates from the build stage
|
||||
COPY --from=builder /app/fail2ban-ui /app/fail2ban-ui
|
||||
RUN chown fail2ban:0 /app/fail2ban-ui && chmod +x /app/fail2ban-ui
|
||||
COPY --from=builder /app/pkg/web/templates /app/templates
|
||||
|
||||
# Set environment variables
|
||||
ENV CONTAINER=true
|
||||
|
||||
# Persist config data
|
||||
VOLUME ["/config"]
|
||||
|
||||
# Expose UI port
|
||||
EXPOSE 8080
|
||||
|
||||
# Run the application as non-root (currently not possible because of fail2ban running as privileged)
|
||||
#USER fail2ban
|
||||
|
||||
# Start Fail2Ban UI
|
||||
CMD ["/app/fail2ban-ui"]
|
||||
Reference in New Issue
Block a user