mirror of
https://github.com/vimagick/dockerfiles
synced 2024-06-25 16:28:40 +00:00
40 lines
1.3 KiB
Docker
40 lines
1.3 KiB
Docker
#
|
|
# Dockerfile for privoxy
|
|
#
|
|
|
|
FROM alpine
|
|
MAINTAINER kev <noreply@datageek.info>
|
|
|
|
ADD https://github.com/tianon/gosu/releases/download/1.4/gosu-amd64 /usr/sbin/gosu
|
|
|
|
RUN apk add -U iptables privoxy \
|
|
&& chmod +x /usr/sbin/gosu \
|
|
&& rm -rf /var/cache/apk/*
|
|
|
|
RUN sed -i -e '/^listen-address/s/127.0.0.1/0.0.0.0/' \
|
|
-e '/^accept-intercepted-requests/s/0/1/' \
|
|
-e '/^#debug/s/#//' /etc/privoxy/config
|
|
|
|
VOLUME /etc/privoxy
|
|
EXPOSE 8118
|
|
|
|
CMD iptables -t filter -P OUTPUT DROP \
|
|
&& iptables -t filter -A OUTPUT -p udp --dport 53 -j ACCEPT \
|
|
&& iptables -t filter -A OUTPUT -p tcp \
|
|
-m multiport --dports 53,80,443,8118 \
|
|
-j ACCEPT \
|
|
&& iptables -t filter -A OUTPUT -p tcp \
|
|
-m state --state ESTABLISHED,RELATED \
|
|
-j ACCEPT \
|
|
&& iptables -t filter -A OUTPUT -p udp \
|
|
-m state --state ESTABLISHED,RELATED \
|
|
-j ACCEPT \
|
|
&& iptables -t filter -A OUTPUT -p tcp \
|
|
-m owner --uid-owner privoxy \
|
|
-j ACCEPT \
|
|
&& iptables -t nat -A OUTPUT -p tcp \
|
|
-m multiport --dports 80,443 \
|
|
-m owner ! --uid-owner privoxy \
|
|
-j REDIRECT --to-ports 8118 \
|
|
&& gosu privoxy privoxy --no-daemon /etc/privoxy/config
|