Dockerfile

FROM python:3.8.13-bullseye

LABEL maintainer="Sida Say <sida.say@khalibre.com>"

COPY prebuildfs /

SHELL ["/bin/bash", "-o", "pipefail", "-c"]
RUN install_packages ca-certificates git supervisor gettext-base nginx

RUN mkdir -p mkdir /etc/privacyidea/data/keys \
    /var/log/privacyidea && \
    adduser --gecos "PrivacyIdea User" --disabled-password --home /home/privacyidea privacyidea --uid 1001 && \
    addgroup privacyidea privacyidea && \
    usermod -g 1001 privacyidea && \
    chown -R privacyidea:privacyidea /etc/privacyidea /var/log/privacyidea

COPY rootfs /

# Which uWSGI .ini file should be used, to make it customizable
ENV UWSGI_INI /etc/uwsgi/uwsgi.ini

# By default, run 2 processes
ENV UWSGI_CHEAPER 2

# By default, when on demand, run up to 16 processes
ENV UWSGI_PROCESSES 16

# By default, allow unlimited file sizes, modify it to limit the file sizes
# To have a maximum of 1 MB (Nginx's default) change the line to:
# ENV NGINX_MAX_UPLOAD 1m
ENV NGINX_MAX_UPLOAD 100m

# By default, Nginx will run a single worker process, setting it to auto
# will create a worker for each CPU core
ENV NGINX_WORKER_PROCESSES 1

# By default, NGINX show NGINX version on error page and HTTP header
ENV NGINX_SERVER_TOKENS 'off'

ENV NGINX_WORKER_CONNECTIONS 1024

# By default, Nginx listens on port 80.
# To modify this, change LISTEN_PORT environment variable.
# (in a Dockerfile or with an option for `docker run`)
ENV NGINX_LISTEN_PORT 80
ENV NGINX_LISTEN_SSL_PORT 443

ENV NGINX_SSL_ENABLED true

ENV PI_SKIP_BOOTSTRAP=false \
    DB_VENDOR=sqlite \
    PI_HOME=/opt/privacyidea \
    VIRTUAL_ENV=/opt/privacyidea

RUN python3 -m venv $VIRTUAL_ENV

ENV PATH="$VIRTUAL_ENV/bin:$PATH"

ARG PI_VERSION=3.7.2

RUN pip3 install wheel && \
    pip3 install uwsgi pymysql-sa PyMySQL psycopg2-binary && \
    pip3 install -r https://raw.githubusercontent.com/privacyidea/privacyidea/v${PI_VERSION}/requirements.txt && \
    pip3 install git+https://github.com/privacyidea/privacyidea.git@v${PI_VERSION}

EXPOSE 80/tcp
EXPOSE 443/tcp

ENTRYPOINT ["/usr/local/bin/privacyidea_entrypoint.sh"]

WORKDIR /opt/privacyidea

VOLUME [ "/data/privacyidea" ]