Merge pull request #6 from ripe-tech/hg/proxy_cached

feat: add proxy cached image

proxy_cached/Dockerfile

@@ -0,0 +1,74 @@
+FROM debian:bullseye-slim
+
+LABEL version="1.0"
+LABEL maintainer="Platforme <[email protected]>"
+
+EXPOSE 80
+EXPOSE 443
+
+ARG VARNISH_MODULES_VERSION=0.17.1
+ARG VARNISH_MODULES_SHA512SUM=c05c3e9d560b319b1eb1ca03bb3626989ed92c7d8d8eeb3f895b0a8f69639e9497403c1797a7936c4a7819c08f36e9cbf32b7e60661bfd584aeed174822a6565
+ARG VARNISH_MODULES_QUERYFILTER_VERSION=1.0.1
+ARG VARNISH_MODULES_QUERYFILTER_SHA512SUM=6c3178d656dfffa7f515afc5d01e00d86b4149e9e61e8024b524e04a427cf3875a918f03999a9bbf4e762ec684d8d193aa03b8d36c1291a825834905802ecc32
+ARG TOOLBOX_COMMIT=96bab07cf58b6e04824ffec608199f1780ff0d04
+
+ENV SERVER_NAME=localhost
+ENV PROXY_PROTO=https://
+ENV PROXY_HOST=app.platforme.com
+ENV VARNISH_SIZE=1G
+
+RUN apt-get -y update && apt-get -y upgrade &&\
+    apt-get -y --no-install-recommends install gettext nginx varnish varnish-modules &&\
+    apt-get -y clean && rm -rf /var/lib/apt/lists/*
+
+COPY docker-entrypoint.sh /
+COPY nginx.default.template /
+COPY varnish.default.template /
+
+RUN set -e; \
+    export DEBIAN_FRONTEND=noninteractive; \
+    export DEBCONF_NONINTERACTIVE_SEEN=true; \
+    apt-get -y update; apt-get -y install \
+        automake \
+        build-essential \
+        ca-certificates \
+        curl \
+        git \
+        libgetdns10 \
+        libgetdns-dev \
+        libtool \
+        libvarnishapi-dev \
+        pkg-config \
+        python3-docutils; \
+    \
+    rm /etc/nginx/sites-available/default /etc/nginx/sites-enabled/default; \
+    touch /etc/nginx/default.conf; \
+    sed -i '/sites-enabled.*$/i \\tinclude \/etc\/nginx\/default\.conf;' /etc/nginx/nginx.conf; \
+    nginx -t -c /etc/nginx/nginx.conf; \
+    \
+    cd /tmp; \
+    git clone https://github.com/varnish/toolbox.git; cd toolbox; \
+    git checkout $TOOLBOX_COMMIT; \
+    cp install-vmod/install-vmod /usr/local/bin/; \
+    \
+    install-vmod https://github.com/varnish/varnish-modules/archive/refs/tags/varnish-modules-$VARNISH_MODULES_VERSION.tar.gz $VARNISH_MODULES_SHA512SUM; \
+    \
+    chown varnish /var/lib/varnish; \
+    apt-get -y purge --auto-remove \
+        automake \
+        build-essential \
+        ca-certificates \
+        curl \
+        git \
+        libgetdns10 \
+        libgetdns-dev \
+        libtool \
+        libvarnishapi-dev \
+        pkg-config \
+        python3-docutils; \
+    apt-get -y clean; \
+    rm -rf /var/lib/apt/lists/* /tmp/toolbox /usr/lib/varnish/vmods/libvmod_*.la;
+
+ENTRYPOINT ["./docker-entrypoint.sh"]
+
+CMD []

proxy_cached/docker-entrypoint.sh

@@ -0,0 +1,19 @@
+#!/bin/bash
+
+set -e
+
+cp /varnish.default.template /etc/varnish/default.vcl
+envsubst '$SERVER_NAME$PROXY_PROTO$PROXY_HOST' < /nginx.default.template > /etc/nginx/default.conf;
+
+if [ "$#" -eq 0 ] ; then
+    nginx -c /etc/nginx/nginx.conf;
+    set -- varnishd \
+        -F \
+        -f /etc/varnish/default.vcl \
+        -a http=:80,HTTP \
+        -p feature=+http2 \
+        -s malloc,$VARNISH_SIZE; \
+        "$@"
+fi
+
+exec "$@"

proxy_cached/nginx.default.template

@@ -0,0 +1,12 @@
+server {
+   listen 8080 default_server;
+   server_name $SERVER_NAME;
+
+   location / {
+        proxy_pass $PROXY_PROTO$PROXY_HOST;
+        proxy_set_header Host $PROXY_HOST;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+   }
+}

proxy_cached/varnish.default.template

@@ -0,0 +1,14 @@
+vcl 4.1;
+
+backend default {
+   .host = "127.0.0.1";
+   .port = "8080";
+}
+
+sub vcl_recv {
+   if (req.method != "GET" && req.method != "HEAD") {
+      return (pass);
+   }
+
+   return (hash);
+}