| bazel build @bookworm//base-files/amd64:data_statusd |
| bazel build @bookworm//netbase/amd64:data_statusd |
| bazel build @bookworm//tzdata/amd64:data_statusd |
| bazel build @bookworm//media-types/amd64:data_statusd |
| bazel build //common:rootfs |
| bazel build //common:passwd |
| bazel build //common:home |
| bazel build //common:group |
| bazel build //common:tmp |
| bazel build //static:nsswitch |
| bazel build //common:os_release_debian12 |
| bazel build //common:cacerts_debian12_amd64 |
| LABEL org.opencontainers.image.title=coraza-spoa-whp org.opencontainers.image.description=Coraza WAF SPOA agent configured for WHP haproxy-manager integration org.opencontainers.image.source=https://github.com/shadowdao/haproxy-manager-base org.opencontainers.image.licenses=MIT |
| COPY /out/coraza-spoa /coraza-spoa # buildkit |
| COPY config.yaml /etc/coraza-spoa/config.yaml # buildkit |
| COPY overrides.conf /etc/coraza/overrides.conf # buildkit |
| COPY pre-overrides.conf /etc/coraza/pre-overrides.conf # buildkit |
| COPY local-overrides.conf /etc/coraza/local-overrides.conf # buildkit |
| COPY host-exceptions/ /etc/coraza/host-exceptions/ # buildkit |
| COPY /out/rules-catalog.json /etc/coraza/rules-catalog.json # buildkit |
| VOLUME [/var/log/coraza] |
| EXPOSE [9000/tcp] |
| ENTRYPOINT ["/coraza-spoa" "--config" "/etc/coraza-spoa/config.yaml"] |
