Initial commit

Author: dtan4

.dockerignore

@@ -0,0 +1,4 @@
+*
+!Dockerfile
+!files/run.sh
+!files/nginx.conf.tmpl

Dockerfile

@@ -0,0 +1,12 @@
+FROM nginx:1.11.9-alpine
+
+# for htpasswd command
+RUN apk add --no-cache --update \
+      apache2-utils
+
+ENV WORKER_PROCESSES auto
+
+COPY files/run.sh /
+COPY files/nginx.conf.tmpl /
+
+ENTRYPOINT ["/run.sh"]

files/nginx.conf.tmpl

@@ -0,0 +1,27 @@
+user nginx;
+worker_processes ##WORKER_PROCESSES##;
+
+error_log /dev/stdout info;
+pid /var/run/nginx.pid;
+
+events {
+  worker_connections 1024;
+}
+
+http {
+  access_log /dev/stdout;
+
+  server {
+    listen 80;
+    server_name ##SERVER_NAME##;
+
+    location / {
+      proxy_pass ##PROXY_PASS##;
+      auth_basic "Restricted";
+      auth_basic_user_file /etc/nginx/.htpasswd;
+
+      # Do not pass Authorization header to destination
+      proxy_set_header Authorization "";
+    }
+  }
+}

files/run.sh

@@ -0,0 +1,32 @@
+#!/bin/sh
+
+set -e
+
+if [ -z $BASIC_AUTH_USERNAME ]; then
+  echo >&2 "BASIC_AUTH_USERNAME must be set"
+  exit 1
+fi
+
+if [ -z $BASIC_AUTH_PASSWORD ]; then
+  echo >&2 "BASIC_AUTH_PASSWORD must be set"
+  exit 1
+fi
+
+if [ -z $SERVER_NAME ]; then
+  echo >&2 "SERVER_NAME must be set"
+  exit 1
+fi
+
+if [ -z $PROXY_PASS ]; then
+  echo >&2 "PROXY_PASS must be set"
+  exit 1
+fi
+
+htpasswd -bBc /etc/nginx/.htpasswd $BASIC_AUTH_USERNAME $BASIC_AUTH_PASSWORD
+sed \
+  -e "s/##WORKER_PROCESSES##/$WORKER_PROCESSES/g" \
+  -e "s/##SERVER_NAME##/$SERVER_NAME/g" \
+  -e "s|##PROXY_PASS##|$PROXY_PASS|g" \
+  nginx.conf.tmpl > /etc/nginx/nginx.conf
+
+nginx -g "daemon off;"