Dockerfile

FROM node:12-alpine3.11
RUN set -ex; \
    \
    apk add --no-cache \
        bash \
        tini \
    ; \
    \
    npm install -g coffeescript@^2.4.1; \
    \
    addgroup -g 101 -S taiga; \
    adduser -D -H -g taiga -G taiga -s /sbin/nologin -S -u 101 taiga; \
    \
    mkdir /etc/opt/taiga-events; \
    touch /var/log/taiga-events.log; \
    chown taiga:taiga /var/log/taiga-events.log; \
    \
    rm -rf /root/.config /root/.npm /var/cache/apk/*
ENV TAIGA_EVENTS_VERSION=2de073c1a3883023050597a47582c6a7405914de \
    TAIGA_EVENTS_SHA256SUM=447447e0deb289f6c03c1227d65d66e19ffe55569bf02151dc08a5f5513df2bd
RUN set -exo pipefail; \
    \
    apk add --no-cache --virtual .build-deps \
        jq \
        moreutils \
    ; \
    \
    wget -q -O taiga-events.tar.gz \
        https://github.com/taigaio/taiga-events/archive/${TAIGA_EVENTS_VERSION}.tar.gz; \
    echo "${TAIGA_EVENTS_SHA256SUM}  taiga-events.tar.gz" | sha256sum -c; \
    tar -xzf taiga-events.tar.gz; \
    rm taiga-events.tar.gz; \
    mv taiga-events-${TAIGA_EVENTS_VERSION} /opt/taiga-events; \
    \
    cd /opt/taiga-events; \
    find . -type d -exec chmod 755 '{}' +; \
    find . -type f -exec chmod 644 '{}' +; \
    cat package.json | \
        # Make sure development dependencies are not installed
        jq 'del(.devDependencies)' | \
        # Fix security vulnerabilities
        jq '.dependencies["base64-url"] = "^2.3.2" | .dependencies.ws = "^7.1.1"' | \
        sponge package.json; \
    npm install; \
    sed -i 's/8888/8080/' config.example.json; \
    mv config.example.json /etc/opt/taiga-events/config.json; \
    ln -s /etc/opt/taiga-events/config.json config.json; \
    cd -; \
    \
    apk del .build-deps; \
    rm -rf /root/.config /root/.npm /var/cache/apk/*
COPY root /
WORKDIR /opt/taiga-events
USER taiga
ENTRYPOINT ["taiga-events"]
EXPOSE 8080