ADD almalinux-10-default-arm64.tar.xz / # buildkit

CMD ["/bin/bash"]

ARG ARCH=

ENV ARCH=arm64v8

ENV DOCKER_IMAGE=fabiocicerchia/nginx-lua

ENV DOCKER_IMAGE_OS=

ENV DOCKER_IMAGE_TAG=

ARG BUILD_DATE

ENV BUILD_DATE=2026-01-30T00:00:00Z

ARG VCS_REF

ENV VCS_REF=cc88eb3

ARG VER_NGINX=1.28.1

ENV VER_NGINX=1.28.1

ARG VER_NGX_DEVEL_KIT=0.3.4

ENV VER_NGX_DEVEL_KIT=0.3.4

ARG VER_NJS=0.9.5

ENV VER_NJS=0.9.5

ARG VER_GEOIP=3.4

ENV VER_GEOIP=3.4

ARG VER_LUAJIT=2.1-20260114

ENV VER_LUAJIT=2.1-20260114

ARG LUAJIT_LIB=/usr/local/lib

ENV LUAJIT_LIB=/usr/local/lib

ARG LUAJIT_INC=/usr/local/include/luajit-2.1

ENV LUAJIT_INC=/usr/local/include/luajit-2.1

ARG LD_LIBRARY_PATH=/usr/local/lib/:

ENV LD_LIBRARY_PATH=/usr/local/lib/:

ARG VER_LUA_NGINX_MODULE=0.10.29R2

ENV VER_LUA_NGINX_MODULE=0.10.29R2

ARG VER_LUA_RESTY_CORE=0.1.32R1

ENV VER_LUA_RESTY_CORE=0.1.32R1

ARG LUA_LIB_DIR=/usr/local/share/lua/5.1

ENV LUA_LIB_DIR=/usr/local/share/lua/5.1

ARG VER_LUAROCKS=3.13.0

ENV VER_LUAROCKS=3.13.0

ARG VER_OPENRESTY_HEADERS=0.39

ENV VER_OPENRESTY_HEADERS=0.39

ARG VER_CLOUDFLARE_COOKIE=f418d77082eaef48331302e84330488fdc810ef4

ENV VER_CLOUDFLARE_COOKIE=f418d77082eaef48331302e84330488fdc810ef4

ARG VER_OPENRESTY_DNS=0.23

ENV VER_OPENRESTY_DNS=0.23

ARG VER_LUA_RESTY_LRUCACHE=0.15

ENV VER_LUA_RESTY_LRUCACHE=0.15

ARG VER_OPENRESTY_MEMCACHED=0.17

ENV VER_OPENRESTY_MEMCACHED=0.17

ARG VER_OPENRESTY_MYSQL=0.29

ENV VER_OPENRESTY_MYSQL=0.29

ARG VER_OPENRESTY_REDIS=0.33

ENV VER_OPENRESTY_REDIS=0.33

ARG VER_OPENRESTY_SHELL=0.03

ENV VER_OPENRESTY_SHELL=0.03

ARG VER_OPENRESTY_SIGNAL=0.04

ENV VER_OPENRESTY_SIGNAL=0.04

ARG VER_OPENRESTY_HEALTHCHECK=0.08

ENV VER_OPENRESTY_HEALTHCHECK=0.08

ARG VER_OPENRESTY_WEBSOCKET=0.13

ENV VER_OPENRESTY_WEBSOCKET=0.13

ARG VER_OPENRESTY_TABLEPOOL=0.03

ENV VER_OPENRESTY_TABLEPOOL=0.03

ARG VER_LUA_UPSTREAM=0.07

ENV VER_LUA_UPSTREAM=0.07

ARG VER_PROMETHEUS=0.20240525

ENV VER_PROMETHEUS=0.20240525

ARG VER_MISC_NGINX=0.33

ENV VER_MISC_NGINX=0.33

ARG VER_OPENRESTY_STREAMLUA=cd2424192fd6c14054b14762bcbe39b6164322f6

ENV VER_OPENRESTY_STREAMLUA=cd2424192fd6c14054b14762bcbe39b6164322f6

ARG VER_OPENRESTY_LIMITTRAFFIC=0.09

ENV VER_OPENRESTY_LIMITTRAFFIC=0.09

ARG VER_OPENRESTY_UPLOAD=0.11

ENV VER_OPENRESTY_UPLOAD=0.11

ARG VER_OPENRESTY_LOCK=0.09

ENV VER_OPENRESTY_LOCK=0.09

ARG VER_OPENRESTY_BALANCER=0.05

ENV VER_OPENRESTY_BALANCER=0.05

ARG VER_OPENRESTY_STRING=0.16

ENV VER_OPENRESTY_STRING=0.16

ENV NGINX_VERSION=1.28.1

ENV NJS_VERSION=0.9.5

ENV PKG_RELEASE=1~

ARG NGX_CFLAGS=-g -O2 -fstack-protector-strong -Wformat -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -fPIC

ENV NGX_CFLAGS=-g -O2 -fstack-protector-strong -Wformat -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -fPIC

ARG NGX_LDOPT=-Wl,-rpath,/usr/local/lib -Wl,-z,relro -Wl,-z,now -Wl,--as-needed -pie

ENV NGX_LDOPT=-Wl,-rpath,/usr/local/lib -Wl,-z,relro -Wl,-z,now -Wl,--as-needed -pie

ARG NGINX_BUILD_CONFIG= --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx --modules-path=/usr/lib/nginx/modules --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --pid-path=/run/nginx.pid --lock-path=/run/nginx.lock --http-client-body-temp-path=/var/cache/nginx/client_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp --with-perl_modules_path=/usr/lib/perl5/vendor_perl --user=nginx --group=nginx `# OFFICIAL MODULES` --with-compat --with-file-aio --with-threads --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_flv_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_mp4_module --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-http_v3_module --with-mail --with-mail_ssl_module --with-stream --with-stream_realip_module --with-stream_ssl_module --with-stream_ssl_preread_module `# CUSTOM MODULES` --add-module=/headers-more-nginx-module-0.39 --add-module=/lua-nginx-module-0.10.29R2 --add-module=/lua-upstream-nginx-module-0.07 --add-module=/ngx_devel_kit-0.3.4 --add-module=/ngx_http_geoip2_module-3.4 --add-module=/njs-0.9.5/nginx --add-module=/set-misc-nginx-module-0.33 --add-module=/stream-lua-nginx-module-cd2424192fd6c14054b14762bcbe39b6164322f6

ENV NGINX_BUILD_CONFIG= --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx --modules-path=/usr/lib/nginx/modules --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --pid-path=/run/nginx.pid --lock-path=/run/nginx.lock --http-client-body-temp-path=/var/cache/nginx/client_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp --with-perl_modules_path=/usr/lib/perl5/vendor_perl --user=nginx --group=nginx `# OFFICIAL MODULES` --with-compat --with-file-aio --with-threads --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_flv_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_mp4_module --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-http_v3_module --with-mail --with-mail_ssl_module --with-stream --with-stream_realip_module --with-stream_ssl_module --with-stream_ssl_preread_module `# CUSTOM MODULES` --add-module=/headers-more-nginx-module-0.39 --add-module=/lua-nginx-module-0.10.29R2 --add-module=/lua-upstream-nginx-module-0.07 --add-module=/ngx_devel_kit-0.3.4 --add-module=/ngx_http_geoip2_module-3.4 --add-module=/njs-0.9.5/nginx --add-module=/set-misc-nginx-module-0.33 --add-module=/stream-lua-nginx-module-cd2424192fd6c14054b14762bcbe39b6164322f6

ARG BUILD_DEPS_BASE= ca-certificates findutils gcc-c++ gzip libmaxminddb libmaxminddb-devel libxml2-devel libxslt-devel make openssl-devel patch pcre2-devel tar unzip which zlib-devel

ENV BUILD_DEPS_BASE= ca-certificates findutils gcc-c++ gzip libmaxminddb libmaxminddb-devel libxml2-devel libxslt-devel make openssl-devel patch pcre2-devel tar unzip which zlib-devel

ARG BUILD_DEPS_AMD64= ca-certificates findutils gcc-c++ gzip libmaxminddb libmaxminddb-devel libxml2-devel libxslt-devel make openssl-devel patch pcre2-devel tar unzip which zlib-devel

ENV BUILD_DEPS_AMD64= ca-certificates findutils gcc-c++ gzip libmaxminddb libmaxminddb-devel libxml2-devel libxslt-devel make openssl-devel patch pcre2-devel tar unzip which zlib-devel

ARG BUILD_DEPS_ARM64V8= ca-certificates findutils gcc-c++ gzip libmaxminddb libmaxminddb-devel libxml2-devel libxslt-devel make openssl-devel patch pcre2-devel tar unzip which zlib-devel

ENV BUILD_DEPS_ARM64V8= ca-certificates findutils gcc-c++ gzip libmaxminddb libmaxminddb-devel libxml2-devel libxslt-devel make openssl-devel patch pcre2-devel tar unzip which zlib-devel

ENV BUILD_DEPS=

ARG NGINX_BUILD_DEPS= git

ENV NGINX_BUILD_DEPS= git

LABEL maintainer=Fabio Cicerchia <info@fabiocicerchia.it> org.label-schema.build-date=2026-01-30T00:00:00Z org.label-schema.description=Nginx 1.28.1 with Lua support based on almalinux (arm64v8) 10.1-20260129. org.label-schema.docker.cmd=docker run -p 80:80 -d fabiocicerchia/nginx-lua:1.28.1-almalinux10.1-20260129 org.label-schema.name=fabiocicerchia/nginx-lua org.label-schema.schema-version=1.0 org.label-schema.url=https://github.com/fabiocicerchia/nginx-lua org.label-schema.vcs-ref=cc88eb3 org.label-schema.vcs-url=https://github.com/fabiocicerchia/nginx-lua org.label-schema.version=1.28.1-almalinux10.1-20260129 image.target.platform= image.target.os= image.target.arch=arm64v8 versions.os=10.1-20260129 versions.luajit2=2.1-20260114 versions.luarocks=3.13.0 versions.nginx=1.28.1 versions.ngx_devel_kit=0.3.4 versions.njs=0.9.5 versions.geoip=3.4 versions.headers-more-nginx-module=0.39 versions.lua-nginx-module=0.10.29R2 versions.lua-resty-balancer=0.05 versions.lua-resty-cookie=f418d77082eaef48331302e84330488fdc810ef4 versions.lua-resty-core=0.1.32R1 versions.lua-resty-dns=0.23 versions.lua-resty-limit-traffic=0.09 versions.lua-resty-lock=0.09 versions.lua-resty-lrucache=0.15 versions.lua-resty-memcached=0.17 versions.lua-resty-mysql=0.29 versions.lua-resty-redis=0.33 versions.lua-resty-shell=0.03 versions.lua-resty-signal=0.04 versions.lua-resty-string=0.16 versions.lua-resty-tablepool=0.03 versions.lua-resty-upload=0.11 versions.lua-resty-upstream-healthcheck=0.08 versions.lua-resty-websocket=0.13 versions.lua-upstream=0.07 versions.nginx-lua-prometheus=0.20240525 versions.set-misc-nginx=0.33 versions.stream-lua-nginx-module=cd2424192fd6c14054b14762bcbe39b6164322f6

ARG PKG_DEPS= ca-certificates gcc-c++ libxml2-devel openssl-devel pcre2-devel unzip zlib-devel

ENV PKG_DEPS= ca-certificates gcc-c++ libxml2-devel openssl-devel pcre2-devel unzip zlib-devel

COPY --chown=101:101 /etc/nginx /etc/nginx # buildkit

COPY --chown=101:101 /usr/bin/envsubst /usr/local/bin/envsubst # buildkit

COPY --chown=101:101 /usr/lib64 /usr/lib64 # buildkit

COPY --chown=101:101 /usr/local/lib /usr/local/lib # buildkit

COPY --chown=101:101 /usr/local/share/lua /usr/local/share/lua # buildkit

COPY --chown=101:101 /usr/sbin/nginx /usr/sbin/nginx # buildkit

COPY --chown=101:101 /usr/sbin/nginx-debug /usr/sbin/nginx-debug # buildkit

COPY --chown=101:101 /var/cache/nginx /var/cache/nginx # buildkit

COPY --chown=101:101 /usr/local/lib/libluajit* /usr/local/lib/ # buildkit

COPY --chown=101:101 /usr/local/lib/pkgconfig/luajit* /usr/local/lib/pkgconfig/ # buildkit

COPY --chown=101:101 /usr/local/include/luajit-2.1 /usr/local/include/luajit-2.1 # buildkit

COPY --chown=101:101 /usr/local/bin/luajit* /usr/local/bin/ # buildkit

COPY --chown=101:101 /usr/local/share/luajit* /usr/local/share/ # buildkit

COPY --chown=101:101 /usr/local/share/man/man1/luajit* /usr/local/share/man/man1/ # buildkit

COPY --chown=101:101 /usr/local/share/lua/5.1/luarocks /usr/local/share/lua/5.1/luarocks # buildkit

COPY --chown=101:101 /usr/local/bin/luarocks* /usr/local/bin/ # buildkit

COPY --chown=101:101 /usr/local/etc/luarocks /usr/local/etc/luarocks # buildkit

COPY --chown=101:101 tpl/??-*.sh /docker-entrypoint.d/ # buildkit

COPY --chown=101:101 tpl/default.conf /etc/nginx/conf.d/default.conf # buildkit

COPY --chown=101:101 tpl/docker-entrypoint.sh / # buildkit

COPY --chown=101:101 tpl/nginx.conf /etc/nginx/nginx.conf # buildkit

COPY --chown=101:101 tpl/support.sh / # buildkit

COPY --chown=101:101 tpl/licenses /licenses # buildkit

SHELL [/bin/sh -o pipefail -c]

RUN |1 PKG_DEPS= ca-certificates gcc-c++ libxml2-devel openssl-devel pcre2-devel unzip zlib-devel /bin/sh -o pipefail -c set -eux && dnf install -y 'dnf-command(config-manager)' epel-release && dnf config-manager --set-enabled epel && dnf config-manager --set-enabled crb && dnf makecache && dnf install -y $PKG_DEPS && ln -sf /usr/local/bin/luajit /usr/local/bin/lua && dnf install -y tzdata && dnf install -y ca-certificates && mkdir -p /var/log/nginx && ln -sf /dev/stdout /var/log/nginx/access.log && ln -sf /dev/stderr /var/log/nginx/error.log && groupadd --system --gid 101 nginx && useradd --system --gid nginx --no-create-home --home /nonexistent --comment "nginx user" --shell /bin/false --uid 101 nginx && dnf upgrade -y && dnf clean all && rm -rf /var/cache/dnf # buildkit

RUN |1 PKG_DEPS= ca-certificates gcc-c++ libxml2-devel openssl-devel pcre2-devel unzip zlib-devel /bin/sh -o pipefail -c envsubst -V && nginx -V && nginx -t && luajit -v && lua -v && luarocks --version # buildkit

EXPOSE map[443/tcp:{} 80/tcp:{}]

HEALTHCHECK &{["CMD-SHELL" "curl --fail http://localhost/ || exit 1"] "30s" "3s" "0s" "0s" '\x00'}

STOPSIGNAL SIGQUIT

ENTRYPOINT ["/docker-entrypoint.sh"]

CMD ["nginx" "-g" "daemon off;"]