mirror of
https://github.com/Impostor/Impostor.git
synced 2026-10-20 01:46:11 +00:00
miniduikboot
3b514f82f2
We see that a lot of support tickets are caused by this default setting, as it is one of the things that blocks connections to the server with no obvious indication that this is happening. To make it easier for first time users to set up Impostor, it is important that this setting is changed. Previously we also recommended against direct exposing due to security reasons, but I believe this fear to be unfounded: Microsoft claims that the Kestrel server is hardened against web server vulnerabilities and supports its use both with and without a reverse proxy.[1] We still recommend using reverse proxies if HTTPS support is needed, so that section of documentation still remains. Setting the ListenIp to 127.0.0.1 is still recommended when using a reverse proxy to remove the ability for people to connect directly, so we add it there as a recommendation. [1]: https://learn.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel/when-to-use-a-reverse-proxy?view=aspnetcore-8.0
48 lines
1.9 KiB
Docker
48 lines
1.9 KiB
Docker
FROM --platform=$BUILDPLATFORM mcr.microsoft.com/dotnet/sdk:7.0 AS build
|
|
|
|
# See for all possible platforms
|
|
# https://github.com/containerd/containerd/blob/master/platforms/platforms.go#L17
|
|
ARG TARGETARCH
|
|
|
|
ARG VERSIONSUFFIX="docker"
|
|
|
|
WORKDIR /source
|
|
|
|
# Copy csproj and restore.
|
|
COPY src/Impostor.Server/Impostor.Server.csproj ./src/Impostor.Server/Impostor.Server.csproj
|
|
COPY src/Impostor.Api.Innersloth.Generator/Impostor.Api.Innersloth.Generator.csproj ./src/Impostor.Api.Innersloth.Generator/Impostor.Api.Innersloth.Generator.csproj
|
|
COPY src/Impostor.Api/Impostor.Api.csproj ./src/Impostor.Api/Impostor.Api.csproj
|
|
COPY src/Directory.Build.props ./src/Directory.Build.props
|
|
|
|
RUN case "$TARGETARCH" in \
|
|
amd64) NETCORE_PLATFORM='linux-x64';; \
|
|
arm64) NETCORE_PLATFORM='linux-arm64';; \
|
|
arm) NETCORE_PLATFORM='linux-arm';; \
|
|
*) echo "unsupported architecture"; exit 1 ;; \
|
|
esac && \
|
|
dotnet restore -r "$NETCORE_PLATFORM" ./src/Impostor.Server/Impostor.Server.csproj && \
|
|
dotnet restore -r "$NETCORE_PLATFORM" ./src/Impostor.Api.Innersloth.Generator/Impostor.Api.Innersloth.Generator.csproj && \
|
|
dotnet restore -r "$NETCORE_PLATFORM" ./src/Impostor.Api/Impostor.Api.csproj
|
|
|
|
# Copy everything else.
|
|
COPY src/. ./src/
|
|
RUN case "$TARGETARCH" in \
|
|
amd64) NETCORE_PLATFORM='linux-x64';; \
|
|
arm64) NETCORE_PLATFORM='linux-arm64';; \
|
|
arm) NETCORE_PLATFORM='linux-arm';; \
|
|
*) echo "unsupported architecture"; exit 1 ;; \
|
|
esac && \
|
|
[ $VERSIONSUFFIX = "none" ] && VERSIONSUFFIX=; \
|
|
dotnet publish -c release -o /app -r "$NETCORE_PLATFORM" -p:VersionSuffix="$VERSIONSUFFIX" --no-restore ./src/Impostor.Server/Impostor.Server.csproj
|
|
|
|
# Final image.
|
|
FROM --platform=$TARGETPLATFORM mcr.microsoft.com/dotnet/aspnet:7.0
|
|
WORKDIR /app
|
|
COPY --from=build /app ./
|
|
|
|
# Override ASPNETCORE_URLS to stop warning.
|
|
ENV ASPNETCORE_URLS=
|
|
|
|
EXPOSE 22023/tcp 22023/udp
|
|
ENTRYPOINT ["./Impostor.Server"]
|