Hardening of the Frontend docker image (#377)

* move the env-config script to a sub folder
* fix doc
* fix ports and ref to the official image
* add hardening to the docker-compose examples
This commit is contained in:
Chevdor
2021-08-26 12:20:01 +02:00
committed by GitHub
parent c201ece634
commit 238d529eae
10 changed files with 83 additions and 22 deletions
+24
View File
@@ -0,0 +1,24 @@
#!/usr/bin/env bash
# This script is used when the docker container starts and does the magic to
# bring the ENV variables to the generated static UI.
ENV_DIR=./tmp
mkdir -p "$ENV_DIR"
TARGET="$ENV_DIR/env-config.js"
# Recreate config file
echo -n > $TARGET
declare -a vars=(
"SUBSTRATE_TELEMETRY_URL"
"SUBSTRATE_TELEMETRY_SAMPLE"
)
echo "window.process_env = {" >> $TARGET
for VAR in ${vars[@]}; do
echo " $VAR: \"${!VAR}\"," >> $TARGET
done
echo "}" >> $TARGET
chmod 440 $TARGET
+15
View File
@@ -0,0 +1,15 @@
#!/usr/bin/env sh
ENV_CONFIG=/app/tmp/env-config.js
if test -f $ENV_CONFIG; then
echo Config is locked
else
echo Generate env-config script...
/usr/local/bin/env.sh
echo done
chmod 444 $ENV_CONFIG
fi
echo Starting nginx...
nginx -g "daemon off;"