FROM danielberteaud/alma:9.24.3-1
MAINTAINER Daniel Berteaud <dbd@ehtrace.com>

ARG OO_VERSION=8.0.1

ENV NGINX_LISTEN_IP=0.0.0.0 \
    NODE_ENV=production-linux \
    NODE_CONFIG_DIR=/etc/onlyoffice/documentserver \
    NODE_DISABLE_COLORS=1 \
    APPLICATION_NAME=onlyoffice \
    OO_STORAGE_SECRET=changeme \
    OO_JWT_TOKEN=changeme \
    OO_USE_TOKEN=true \
    OO_AUTOSAVE=true \
    OO_AUTOSAVE_INTERVAL=5m \
    OO_VERIFY_CERT=true \
    OO_LOG4JS_CONFIG=/etc/onlyoffice/documentserver/log4js/production.json \
    OO_DB_HOST=localhost \
    OO_DB_PORT=5432 \
    OO_DB_NAME=onlyoffice \
    OO_DB_USER=onlyoffice \
    OO_DB_PASS=onlyoffice

USER root
COPY root/etc/yum.repos.d/ /etc/yum.repos.d/
RUN set -euxo pipefail &&\
    dnf -y update &&\
    rpm -i https://download.postgresql.org/pub/repos/yum/reporpms/EL-9-x86_64/pgdg-redhat-repo-latest.noarch.rpm &&\
    dnf -y module disable postgresql &&\
    addgroup -g 819 ds &&\
    adduser --system --ingroup ds --disabled-password --uid 819 --home /var/www/onlyoffice/documentserver/ --shell /sbin/nologin ds &&\
    dnf -y install \
      dnf \
      postgresql16 \
      onlyoffice-documentserver-${OO_VERSION} \
      nginx \
    &&\
    dnf clean all &&\
    rm -rf /var/cache/dnf/* /var/cache/yum/* /var/log/dnf* /var/log/yum/* /var/lib/dnf/history* 

COPY root/ /

EXPOSE 8819
USER ds
CMD ["minit"]