NBI needs to support HTTPS requests to AAI

[externalapi/nbi.git] / Dockerfile

diff --git a/Dockerfile b/Dockerfile
index 5f43f6b..af70549 100644 (file)
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,23 @@
-FROM openjdk:8-jdk-alpine
-ADD target/nbi-rest-services-1.0.0-SNAPSHOT.jar app.jar
-ENV JAVA_OPTS="-Djava.security.egd=file:/dev/./urandom -Dspring.profiles.active=docker -jar"
-ENTRYPOINT exec java $JAVA_OPTS  /app.jar
\ No newline at end of file
+FROM openjdk:8-jre-alpine
+
+ARG SERVER_PORT
+ARG PKG_FILENAME=nbi-rest-services-1.0.0-SNAPSHOT.jar
+ADD target/$PKG_FILENAME app.jar
+
+COPY src/main/resources/certificate /certs
+ARG CERT_PASS=changeit
+RUN for cert in $(ls -d /certs/*); do \
+        echo "adding $cert to java keystore..."; \
+        keytool -import \
+                -file "$cert" \
+                -storepass "${CERT_PASS}" \
+                -keystore $JAVA_HOME/lib/security/cacerts \
+                -alias "$(basename $cert)" \
+                --noprompt; \
+    done
+
+ENV SERVER_PORT=${SERVER_PORT:-8080}
+ENV JAVA_OPTS="-Djava.security.egd=file:/dev/./urandom -jar"
+
+EXPOSE $SERVER_PORT
+ENTRYPOINT java $JAVA_OPTS -jar /app.jar