fix nginx user issue

QPod · Jun 16, 2024 · 8d96e12 · 8d96e12
1 parent 149776e
commit 8d96e12
Show file tree

Hide file tree

Showing 2 changed files with 49 additions and 47 deletions.
diff --git a/docker_openresty/Dockerfile b/docker_openresty/Dockerfile
@@ -14,6 +14,8 @@ RUN set -ex \
  && source /opt/utils/script-setup-openresty.sh && setup_openresty \
  && source /opt/utils/script-setup-acme.sh      && setup_acme \
  && pip install certbot \
+ && useradd nginx -G www-data \
+ && mkdir -pv /var/cache/nginx /var/log/nginx \
  && install__clean
 
 CMD ["/opt/nginx/bin/nginx", "-g", "daemon off;"]

diff --git a/docker_openresty/work/script-setup-openresty.sh b/docker_openresty/work/script-setup-openresty.sh
@@ -1,7 +1,7 @@
 source /opt/utils/script-utils.sh
 
 setup_openresty() {
-	# ref: https://github.com/openresty/docker-openresty/blob/master/jammy/Dockerfile
+  # ref: https://github.com/openresty/docker-openresty/blob/master/jammy/Dockerfile
 
     install_apt /opt/utils/install_list_openresty.apt \
  && VERSION_OR=$(curl -sL https://github.com/openresty/openresty/releases.atom | grep "releases/tag" | head -1 | grep -Po '(\d[\d|.]+)') \
@@ -11,55 +11,55 @@ setup_openresty() {
  && mv /opt/openresty-* /tmp/openresty && cd /tmp/openresty \
  && export NGINX_HOME=/opt/nginx \
  && ./configure \
-	--prefix=${NGINX_HOME}/etc \
-	--sbin-path=${NGINX_HOME}/bin/nginx \
-	--modules-path=${NGINX_HOME}/modules \
-	--conf-path=${NGINX_HOME}/nginx.conf \
-	--error-log-path=/var/log/nginx/error.log \
-	--http-log-path=/var/log/nginx/access.log \
-	--pid-path=/var/run/nginx.pid \
-	--lock-path=/var/run/nginx.lock \
-	--http-client-body-temp-path=/var/cache/nginx/client_temp \
-	--http-proxy-temp-path=/var/cache/nginx/proxy_temp \
-	--http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp \
-	--http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp \
-	--http-scgi-temp-path=/var/cache/nginx/scgi_temp \
-	--user=nginx \
-	--group=nginx \
-	--with-compat \
-	--with-file-aio \
-	--with-threads \
-	--with-http_addition_module \
-	--with-http_auth_request_module \
-	--with-http_dav_module \
-	--with-http_flv_module \
-	--with-http_geoip_module=dynamic \
-	--with-http_gunzip_module \
-	--with-http_gzip_static_module \
-	--with-http_image_filter_module=dynamic \
-	--with-http_mp4_module \
-	--with-http_random_index_module \
-	--with-http_realip_module \
-	--with-http_secure_link_module \
-	--with-http_slice_module \
-	--with-http_ssl_module \
-	--with-http_stub_status_module \
-	--with-http_sub_module \
-	--with-http_v2_module \
-	--with-http_v3_module \
-	--with-http_xslt_module=dynamic \
-	--with-mail \
-	--with-mail_ssl_module \
-	--with-stream \
-	--with-stream_realip_module \
-	--with-stream_ssl_module \
-	--with-stream_ssl_preread_module \
+    --prefix=${NGINX_HOME}/etc \
+    --sbin-path=${NGINX_HOME}/bin/nginx \
+    --modules-path=${NGINX_HOME}/modules \
+    --conf-path=${NGINX_HOME}/nginx.conf \
+    --error-log-path=/var/log/nginx/error.log \
+    --http-log-path=/var/log/nginx/access.log \
+    --pid-path=/var/run/nginx.pid \
+    --lock-path=/var/run/nginx.lock \
+    --http-client-body-temp-path=/var/cache/nginx/client_temp \
+    --http-proxy-temp-path=/var/cache/nginx/proxy_temp \
+    --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp \
+    --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp \
+    --http-scgi-temp-path=/var/cache/nginx/scgi_temp \
+    --user=nginx \
+    --group=nginx \
+    --with-compat \
+    --with-file-aio \
+    --with-threads \
+    --with-http_addition_module \
+    --with-http_auth_request_module \
+    --with-http_dav_module \
+    --with-http_flv_module \
+    --with-http_geoip_module=dynamic \
+    --with-http_gunzip_module \
+    --with-http_gzip_static_module \
+    --with-http_image_filter_module=dynamic \
+    --with-http_mp4_module \
+    --with-http_random_index_module \
+    --with-http_realip_module \
+    --with-http_secure_link_module \
+    --with-http_slice_module \
+    --with-http_ssl_module \
+    --with-http_stub_status_module \
+    --with-http_sub_module \
+    --with-http_v2_module \
+    --with-http_v3_module \
+    --with-http_xslt_module=dynamic \
+    --with-mail \
+    --with-mail_ssl_module \
+    --with-stream \
+    --with-stream_realip_module \
+    --with-stream_ssl_module \
+    --with-stream_ssl_preread_module \
     --with-ipv6 \
     --with-md5-asm \
     --with-sha1-asm \
-	--with-luajit-xcflags='-DLUAJIT_NUMMODE=2 -DLUAJIT_ENABLE_LUA52COMPAT' \
-	--with-pcre \
-	--with-pcre-jit \
+    --with-luajit-xcflags='-DLUAJIT_NUMMODE=2 -DLUAJIT_ENABLE_LUA52COMPAT' \
+    --with-pcre \
+    --with-pcre-jit \
  && make -j8 && make install \
  && ln -sf ${NGINX_HOME}/bin/nginx /usr/bin/ \
  && echo "@ Version info of Nginx: $(nginx -version)"