Dockerfile

FROM ruby:2.7-buster

# Setup environment variables for use at build time only
ARG APP_WORKDIR
ARG SECRET_KEY_BASE
ARG RAILS_ENV

# Setup environment variables to pass to the applications
ENV RAILS_ENV="$RAILS_ENV" \
    LANG=C.UTF-8 \
    RAILS_LOG_TO_STDOUT=yes_please \
    BUNDLE_JOBS=2 \
    APP_WORKDIR="$APP_WORKDIR"/
    
ENV SECRET_KEY_BASE=$SECRET_KEY_BASE

# Add backports to apt-get sources
# Install libraries, dependencies, java
RUN apt-get update -qq \
    && apt-get install -y --no-install-recommends \
    apache2 \
    bzip2 \
    certbot \
    cron \
    git \
    libpq-dev \
    libxml2-dev \
    libxslt1-dev \
    python-certbot-apache \
    tree \
    unzip \
    vim \
    yarn \
    xz-utils \
    # https://github.com/docker-library/ruby/issues/226
    && curl -sL https://deb.nodesource.com/setup_10.x | bash - && apt-get install -y nodejs

#    software-properties-common \

WORKDIR $APP_WORKDIR

## install apache, certs and modules for proxy##
COPY docker/ssl.conf /etc/apache2/conf-available/
RUN a2enconf ssl

COPY docker/hhc.conf /etc/apache2/sites-available/
COPY docker/hhc_ssl.conf /etc/apache2/sites-available/

#in case we are generating self-signed certs for a docker only instance
COPY docker/gen_cert.sh /bin/
RUN chmod +x /bin/gen_cert.sh

# For later use by certbot/cron
COPY docker/renew_cert /var/tmp/
RUN chmod +x /var/tmp/renew_cert

#SSL will be started after we are up and certbot has done its thang (so just the 80 vhost for now)
RUN a2ensite hhc
RUN a2dissite 000-default

RUN a2enmod ssl
RUN a2enmod headers
RUN a2enmod rewrite
RUN a2enmod proxy
RUN a2enmod proxy_balancer
RUN a2enmod proxy_http

# copy gemfiles to production folder
COPY Gemfile Gemfile.lock $APP_WORKDIR

RUN gem install bundler:2.2.11

# install gems to system - use flags dependent on RAILS_ENV
RUN if [ "$RAILS_ENV" = "production" ]; then \
            bundle install --without test:development; \
        else \
            bundle install --without production --no-deployment; \
        fi \
    && mv Gemfile.lock Gemfile.lock.built_by_docker

# copy the application
COPY . $APP_WORKDIR

# use the just built Gemfile.lock, not the one copied into the container and verify the gems are correctly installed
RUN mv Gemfile.lock.built_by_docker Gemfile.lock \
    && bundle check

# generate production assets if production environment
RUN if [ "$RAILS_ENV" = "production" ]; then \
        SECRET_KEY_BASE_PRODUCTION=0 bundle exec rake assets:clean assets:precompile; \
    fi

COPY docker-entrypoint.sh /bin/docker-entrypoint.sh
RUN chmod +x /bin/docker-entrypoint.sh