| 12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455 |
- # Use nginx as the base image for serving static files
- FROM nginx:alpine
- # PERF-019: Only copy necessary web files (exclude .git, desktop-app, wiki, etc.)
- COPY index.html /usr/share/nginx/html/
- COPY script.js /usr/share/nginx/html/
- COPY styles.css /usr/share/nginx/html/
- COPY sw.js /usr/share/nginx/html/
- COPY manifest.json /usr/share/nginx/html/
- COPY robots.txt /usr/share/nginx/html/
- COPY sitemap.xml /usr/share/nginx/html/
- COPY assets/icon.jpg /usr/share/nginx/html/assets/
- # Create a custom nginx configuration with compression and security
- # PERF-020: Added gzip compression for text-based assets
- RUN echo 'server { \
- listen 80; \
- server_name localhost; \
- root /usr/share/nginx/html; \
- index index.html; \
- \
- # Enable gzip compression (PERF-020) \
- gzip on; \
- gzip_vary on; \
- gzip_proxied any; \
- gzip_comp_level 6; \
- gzip_min_length 256; \
- gzip_types text/plain text/css application/json application/javascript text/xml application/xml text/javascript image/svg+xml; \
- \
- # Handle client-side routing for SPA \
- location / { \
- try_files $uri $uri/ /index.html; \
- } \
- \
- # Cache static assets \
- location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ { \
- expires 1y; \
- add_header Cache-Control "public, immutable"; \
- } \
- \
- # Security headers \
- add_header X-Frame-Options "SAMEORIGIN" always; \
- add_header X-Content-Type-Options "nosniff" always; \
- add_header X-XSS-Protection "1; mode=block" always; \
- add_header Referrer-Policy "strict-origin-when-cross-origin" always; \
- # PERF-029: Content Security Policy for defense-in-depth \
- add_header Content-Security-Policy "default-src '"'"'self'"'"'; script-src '"'"'self'"'"' cdnjs.cloudflare.com cdn.jsdelivr.net '"'"'unsafe-inline'"'"'; style-src '"'"'self'"'"' cdnjs.cloudflare.com cdn.jsdelivr.net '"'"'unsafe-inline'"'"'; img-src '"'"'self'"'"' https: data: blob:; font-src '"'"'self'"'"' cdn.jsdelivr.net; connect-src '"'"'self'"'"' api.github.com raw.githubusercontent.com;" always; \
- }' > /etc/nginx/conf.d/default.conf
- # Expose port 80
- EXPOSE 80
- # Start nginx
- CMD ["nginx", "-g", "daemon off;"]
|
