FROM alpine:edge
MAINTAINER Wonderfall <wonderfall@schrodinger.io>

ARG OWNCLOUD_VERSION=9.0.2
ARG APCU_VERSION=5.1.4
ARG APCUBC_VERSION=1.0.3

ARG GPG_owncloud="E303 6906 AD9F 3080 7351  FAC3 2D5D 5E97 F697 8A26"

ENV GID=991 UID=991

RUN echo "@commuedge http://nl.alpinelinux.org/alpine/edge/community" >> /etc/apk/repositories \
 && echo "@testing http://nl.alpinelinux.org/alpine/edge/testing" >> /etc/apk/repositories \
 && BUILD_DEPS=" \
    build-base \
    autoconf \
    gnupg \
    tar" \
 && apk -U add \
    $BUILD_DEPS \
    nginx \
    supervisor \
    openssl \
    ca-certificates \
    libwebp \
    tini@commuedge \
    php7@testing \
    php7-fpm@testing \
    php7-intl@testing \
    php7-mbstring@testing \
    php7-curl@testing \
    php7-gd@testing \
    php7-mcrypt@testing \
    php7-opcache@testing \
    php7-json@testing \
    php7-session@testing \
    php7-pdo@testing \
    php7-dom@testing \
    php7-ctype@testing \
    php7-iconv@testing \
    php7-pdo_mysql@testing \
    php7-zlib@testing \
    php7-zip@testing \
    php7-xmlreader@testing \
    php7-posix@testing \
    php7-openssl@testing \
    php7-dev@testing \
    php7-pear@testing \
 && mkdir /owncloud && cd /tmp \
 && OWNCLOUD_TARBALL="owncloud-${OWNCLOUD_VERSION}.tar.bz2" \
 && wget -q https://download.owncloud.org/community/${OWNCLOUD_TARBALL} \
 && wget -q https://download.owncloud.org/community/${OWNCLOUD_TARBALL}.sha256 \
 && wget -q https://download.owncloud.org/community/${OWNCLOUD_TARBALL}.asc \
 && wget -q https://owncloud.org/owncloud.asc \
 && wget -q https://pecl.php.net/get/apcu-${APCU_VERSION}.tgz \
 && wget -q https://pecl.php.net/get/apcu_bc-${APCUBC_VERSION}.tgz \
 && echo "Verifying both integrity and authenticity of ${OWNCLOUD_TARBALL}..." \
 && CHECKSUM_STATE=$(echo -n $(sha256sum -c ${OWNCLOUD_TARBALL}.sha256) | tail -c 2) \
 && if [ "${CHECKSUM_STATE}" != "OK" ]; then echo "Warning! Checksum does not match!" && exit 1; fi \
 && gpg --import owncloud.asc \
 && FINGERPRINT="$(LANG=C gpg --verify ${OWNCLOUD_TARBALL}.asc ${OWNCLOUD_TARBALL} 2>&1 \
  | sed -n "s#Primary key fingerprint: \(.*\)#\1#p")" \
 && if [ -z "${FINGERPRINT}" ]; then echo "Warning! Invalid GPG signature!" && exit 1; fi \
 && if [ "${FINGERPRINT}" != "${GPG_owncloud}" ]; then echo "Warning! Wrong GPG fingerprint!" && exit 1; fi \
 && echo "All seems good, now unpacking ${OWNCLOUD_TARBALL}..." \
 && tar xjf ${OWNCLOUD_TARBALL} --strip 1 -C /owncloud \
 && tar xzf apcu-${APCU_VERSION}.tgz && tar xzf apcu_bc-${APCUBC_VERSION}.tgz \
 && cd apcu-${APCU_VERSION} && phpize7 && ./configure --with-php-config=/usr/bin/php-config7 && make && make install \
 && cd ../apcu_bc-${APCUBC_VERSION} && phpize7 && ./configure --with-php-config=/usr/bin/php-config7 && make && make install \
 && sed -i "s/;env\[PATH\]/env\[PATH\]/g" /etc/php7/php-fpm.d/www.conf \
 && apk del ${BUILD_DEPS} php7-dev php7-pear \
 && rm -rf /var/cache/apk/* /tmp/*

COPY nginx.conf /etc/nginx/nginx.conf
COPY php-fpm.conf /etc/php7/php-fpm.conf
COPY opcache.ini /etc/php7/conf.d/00_opcache.ini
COPY apcu.ini /etc/php7/conf.d/00_apcu.ini
COPY supervisord.conf /etc/supervisor/supervisord.conf
COPY run.sh /usr/local/bin/run.sh
COPY cron /etc/periodic/15min/owncloud

RUN chmod +x /usr/local/bin/run.sh /etc/periodic/15min/owncloud

VOLUME /data /config /apps2
EXPOSE 80

LABEL description="A server software for creating file hosting services" \
      owncloud="ownCloud v${OWNCLOUD_VERSION}" \
      apcu="apcu v${APCU_VERSION}" \
      apcu_bc="apcu_bc v${APCUBC_VERSION}"

CMD ["/sbin/tini","--","run.sh"]