# base image
FROM debian:buster
# disable dpkg interactive-mode
ENV DEBIAN_FRONTEND noninteractive
# set work dir
WORKDIR /var/www/app
# install nginx
RUN apt-get update
RUN apt-get install -y nginx
# install openssl & ssl-cert
RUN apt-get install -y openssl ssl-cert
# create dhparam.pem
RUN mkdir -p /etc/nginx/ssl
RUN openssl dhparam -out /etc/nginx/ssl/dhparam.pem 2048
# disable default vhost
RUN unlink /etc/nginx/sites-enabled/default
# remove apt-cache leftovers
RUN apt-get clean
RUN rm -rf /var/lib/apt/lists/*
# set default CMD
CMD /usr/sbin/nginx -g 'daemon off;'