FROM docker.io/library/nginx:1.30.0-alpine

RUN apk add --no-cache \
        curl \
        bash \
        vim \
        net-tools \
        nmap-ncat \
        git \
        jq \
        logrotate \
        tzdata \
    && cp /usr/share/zoneinfo/Asia/Seoul /etc/localtime \
    && echo "Asia/Seoul" > /etc/timezone \
    && apk del tzdata

ENV TZ=Asia/Seoul

RUN printf '%s\n' \
        '/var/log/nginx/*.log {' \
        '    daily' \
        '    rotate 7' \
        '    missingok' \
        '    notifempty' \
        '    compress' \
        '    delaycompress' \
        '    copytruncate' \
        '    su root root' \
        '}' \
        > /etc/logrotate.d/nginx

RUN addgroup -g 700 -S dckadm \
    && deluser nginx 2>/dev/null || true \
    && delgroup nginx 2>/dev/null || true \
    && adduser -u 700 -S nginx -G dckadm \
    && chown -R nginx:dckadm /usr/share/nginx/html /var/cache/nginx /var/log/nginx

EXPOSE 80

USER nginx