Dockerfile

# haproxy2.x with certbot
FROM alpine:3.18.12

CMD ["/bin/sh"]

# Setup HAProxy
ENV HAPROXY_MAJOR 2.8
ENV HAPROXY_VERSION 2.8.15
#curl -SL "https://www.haproxy.org/download/${HAPROXY_MAJOR}/src/haproxy-${HAPROXY_VERSION}.tar.gz" -o haproxy.tar.gz
#curl -SL "https://src.fedoraproject.org/repo/pkgs/haproxy/haproxy-${HAPROXY_VERSION}.tar.gz" -o haproxy.tar.gz

RUN /bin/sh -c set -x \
  && sed -i 's/dl-cdn.alpinelinux.org/mirrors.ustc.edu.cn/g' /etc/apk/repositories \         
  && apk update \
  && apk add --no-cache --virtual .build-deps     ca-certificates     gcc     libc-dev     linux-headers     lua5.3-dev     make     openssl     openssl-dev     pcre2-dev     readline-dev     tar     zlib-dev

RUN wget -O haproxy.tar.gz "https://www.haproxy.org/download/${HAPROXY_MAJOR}/src/haproxy-${HAPROXY_VERSION}.tar.gz"

RUN mkdir -p /usr/src/haproxy      \
  && tar -xzf haproxy.tar.gz -C /usr/src/haproxy --strip-components=1       \         
  && rm haproxy.tar.gz      \         
  && make -C /usr/src/haproxy -j"$(nproc)" TARGET=linux-musl CPU=generic USE_PCRE2=1 USE_PCRE2_JIT=1 USE_REGPARM=1 USE_OPENSSL=1 USE_ZLIB=1 USE_TFO=1 USE_LINUX_TPROXY=1 USE_GETADDRINFO=1 USE_LUA=1 USE_PROMEX=1 LUA_LIB=/usr/lib/lua5.3 LUA_INC=/usr/include/lua5.3  all  \
  && make -C /usr/src/haproxy TARGET=linux2628 install-bin install-man       \         
  && mkdir -p /usr/local/etc/haproxy      \         
  && cp -R /usr/src/haproxy/examples/errorfiles /usr/local/etc/haproxy/errors      \         
  && rm -rf /usr/src/haproxy       \         
  && runDeps="$(     scanelf --needed --nobanner --format '%n#p' --recursive /usr/local       | tr ',' '\n'       | sort -u       | awk 'system("[ -e /usr/local/lib/" $1 " ]") == 0 { next } { print "so:" $1 }'   )"    \         
  && apk add --virtual .haproxy-rundeps $runDeps    \         
  && apk del .build-deps    \         
  && apk add --no-cache openssl zlib lua5.3-libs pcre2    \         
  && apk add --no-cache --update     supervisor     libnl3-cli     net-tools     iproute2     certbot     openssl    \
  && rm -rf /var/cache/apk/*    \         
  && mkdir -p /var/log/supervisor    \         
  && mkdir -p /usr/local/etc/haproxy/certs.d    \         
  && mkdir -p /usr/local/etc/letsencrypt


# 设置时区
ENV TZ="Asia/Shanghai"
RUN ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone

COPY supervisord.conf /etc/supervisor/conf.d/supervisord.conf
COPY certbot.cron /etc/cron.d/certbot
COPY cli.ini /usr/local/etc/letsencrypt/cli.ini
COPY haproxy-refresh.sh /usr/bin/haproxy-refresh
COPY haproxy-restart.sh /usr/bin/haproxy-restart
COPY haproxy-check.sh /usr/bin/haproxy-check
COPY certbot-certonly.sh /usr/bin/certbot-certonly
COPY certbot-renew.sh /usr/bin/certbot-renew

RUN /bin/sh -c set -x \
  && chmod +x /usr/bin/haproxy-refresh /usr/bin/haproxy-restart /usr/bin/haproxy-check /usr/bin/certbot-certonly /usr/bin/certbot-renew         \         
  && crontab /etc/cron.d/certbot
COPY start.sh /start.sh
RUN /bin/sh -c set -x \
  && chmod +x /start.sh
EXPOSE 443 80
VOLUME [/config/ /etc/letsencrypt/ /usr/local/etc/haproxy/certs.d/]
CMD ["/start.sh"]