BIENTOT

srcs/requirements/nginx/Dockerfile

@@ -1,21 +1,12 @@
-FROM debian:bullseye
+FROM alpine:3.19
 
-RUN apt-get update -y && \
-    apt-get upgrade -y && \
-    apt-get install -y nginx openssl && \
-    mkdir -p /etc/nginx/ssl /var/run/nginx && \
-    openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
-    -keyout /etc/ssl/private/server_pkey.pem \
-    -out /etc/nginx/ssl/server.crt \
-    -subj "/C=FR/ST=IDF/L=Paris/O=42/OU=42/CN=yantoine.42.fr/UID=yantoine"
+RUN apk add --no-cache nginx openssl
 
-COPY conf/nginx.conf /etc/nginx/sites-available/nginx.conf
+COPY conf/default.conf /etc/nginx/http.d/default.conf
+COPY tools/generate_ssl.sh /tmp/generate_ssl.sh
 
-# Suppression du site par défaut et activation de la nouvelle configuration
-RUN rm /etc/nginx/sites-enabled/default && \
-    ln -s /etc/nginx/sites-available/nginx.conf /etc/nginx/sites-enabled/
+RUN chmod +x /tmp/generate_ssl.sh && /tmp/generate_ssl.sh
 
 EXPOSE 443
 
-ENTRYPOINT ["/usr/sbin/nginx", "-g", "daemon off;"]
-
+CMD ["nginx", "-g", "daemon off;"]

srcs/requirements/nginx/conf/default.conf

@@ -0,0 +1,22 @@
+server {
+    listen 443 ssl;
+    server_name yantoine.42.fr;
+
+    ssl_certificate /etc/ssl/private/yantoine.42.fr.crt;
+    ssl_certificate_key /etc/ssl/private/yantoine.42.fr.key;
+
+    ssl_protocols TLSv1.2 TLSv1.3;
+
+    root /var/www/html;
+    index index.php index.html;
+
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+    }
+
+    location ~ \.php$ {
+        fastcgi_pass wordpress:9000;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+    }
+}

srcs/requirements/nginx/conf/nginx.conf

@@ -1,28 +0,0 @@
-server {
-	listen 443 ssl default_server;
-	ssl_certificate /etc/ssl/certs/server.crt;
-
-    ssl_certificate_key /etc/ssl/private/server_pkey.pem;
-
-    root /var/www/html;
-    
-    index index.php;
-
-    server_name $DOMAIN_NAME;
-
-    location / {
-        try_files $uri $uri/ =404;
-    }
-
-    location ~ \.php$ {
-        # Include the fastcgi-php configuration snippet
-        include snippets/fastcgi-php.conf;
-
-        # Set the SCRIPT_FILENAME parameter to the full path of the requested script
-        fastcgi_param SCRIPT_FILENAME /var/www/html/$fastcgi_script_name;
-        
-        # Forward requests to the PHP-FPM service listening on the wordpress host on port 9000
-        fastcgi_pass wordpress:9000;
-    }
-}
-}

srcs/requirements/nginx/tools/generate_ssl.sh

@@ -0,0 +1,7 @@
+#!/bin/sh
+mkdir -p /etc/ssl/private
+openssl req -x509 -nodes -days 365 \
+  -subj "/C=FR/ST=Paris/L=Paris/O=42/OU=Login/CN=yantoine.42.fr" \
+  -newkey rsa:2048 \
+  -keyout /etc/ssl/private/yantoine.42.fr.key \
+  -out /etc/ssl/private/yantoine.42.fr.crt