+# add a simple script that can auto-detect the appropriate JAVA_HOME value
+# based on whether the JDK or only the JRE is installed
+RUN { \
+ echo '#!/bin/sh'; \
+ echo 'set -e'; \
+ echo; \
+ echo 'dirname "$(dirname "$(readlink -f "$(which javac || which java)")")"'; \
+ } > /usr/local/bin/docker-java-home \
+ && chmod +x /usr/local/bin/docker-java-home \
+ && set -x \
+ && apk upgrade \
+ && apk update \
+ && apk add --no-cache openjdk11="$JAVA_ALPINE_VERSION" \
+ && [ "$JAVA_HOME" = "$(docker-java-home)" ] \
+ #install neccessary tools
+ && apk add --no-cache curl \
+ && apk add --no-cache postgresql-client="$PG_VERSION" \
+ && apk add --no-cache nss \
+ #add the frontend pacakge to the docker images
+ && rm /etc/nginx/conf.d/default.conf \
+ && chmod -R 777 /usr/local/openresty/nginx/ \
+ && chmod -R 755 /etc/ssl/public \
+ #switch the user to holmes
+ && addgroup -S holmes && adduser -S -G holmes holmes \
+ && chmod -R a+rw /home/holmes/ \
+ && chmod -R a+rw /var/log/ \
+ && chmod 755 /home/holmes/bin/*.sh
+
+USER holmes
+CMD ["sh", "/home/holmes/bin/run.sh"]