FROM registry.yandex.net/rtc-base/xenial:stable

RUN wget --quiet -O - http://mirror.yandex.ru/mirrors/postgresql/ACCC4CF8.asc | apt-key add -
RUN echo "deb http://mirror.yandex.ru/mirrors/postgresql/ xenial-pgdg main" >> /etc/apt/sources.list.d/pgdg.list

RUN echo 'deb http://archive.ubuntu.com/ubuntu/ xenial universe' >> /etc/apt/sources.list.d/xenial-universe.list \
    && echo 'deb-src http://archive.ubuntu.com/ubuntu/ xenial universe' >> /etc/apt/sources.list.d/xenial-universe.list \
    && echo 'deb http://archive.ubuntu.com/ubuntu/ xenial-updates universe' >> /etc/apt/sources.list.d/xenial-universe.list \
    && echo 'deb-src http://archive.ubuntu.com/ubuntu/ xenial-updates universe' >> /etc/apt/sources.list.d/xenial-universe.list \
    && apt-get update \
    && apt-get install -y git jq nano screen \
    && apt-get install -y supervisor nginx=1.14.2-1.yandex.15 lua-cjson fontconfig ttf-mscorefonts-yandex cron

RUN ln -sf /usr/lib/x86_64-linux-gnu/lua/ /usr/local/lib/lua

RUN apt-get autoremove -y \
    && apt-get clean \
    && rm -rf /var/lib/apt/lists/* \
    && rm -rf /var/cache/* \
    && rm -rf /var/log/apt\
    && rm -rf /root/.cache

COPY etc /etc
COPY usr /usr
COPY entrypoint.sh /entrypoint.sh
COPY bin /opt/bin
COPY version.txt /version.txt

RUN chmod 644 /etc/logrotate.d/nginx

RUN mkdir -p /etc/nginx/ssl && \
    openssl req -x509 -nodes -days 365 -newkey rsa:4096 \
    -subj "/C=RU/ST=Moscow/L=Moscow/O=Yandex/OU=SWAT/CN=localhost.msup.yandex.ru" \
    -keyout /etc/nginx/ssl/payments.pem -out /etc/nginx/ssl/payments.pem

RUN mkdir /var/log/payments

RUN mv /opt/bin/bin /opt/bin/payments
RUN chmod u+x /entrypoint.sh
RUN ln -s /opt/bin/payments /usr/bin/payments

ENTRYPOINT ["/entrypoint.sh"]
CMD ["supervisord", "-n", "-c", "/etc/supervisor/supervisord.conf"]
