FROM nginx
COPY ./nginx.conf /etc/nginx/nginx.conf
RUN mkdir -p /certs/private \
    && mkdir -p /certs/public \
    && chown -R nginx. /certs \
    && chmod 400 /certs/private \
    && chmod 700 /certs/public
COPY fullchain.pem /certs/public/fullchain.pem
COPY privkey.pem /certs/private/privkey.pem
EXPOSE 80
EXPOSE 443
CMD ["nginx", "-g", "daemon off;"]