3x-ui/Dockerfile

# ========================================================
# Stage: Builder
# ========================================================
FROM golang:1.25-alpine AS builder

WORKDIR /app

RUN apk add --no-cache \
  build-base \
  gcc

# docker CACHE
COPY go.mod go.sum ./
RUN go mod download

COPY . .

ENV CGO_ENABLED=1
ENV CGO_CFLAGS="-D_LARGEFILE64_SOURCE"
RUN go build -ldflags "-w -s" -o build/x-ui main.go

# ========================================================
# Stage: Xray downloader
# ========================================================
FROM alpine AS xray-downloader

ARG TARGETARCH
ARG XRAY_VERSION

WORKDIR /app
RUN apk add --no-cache wget unzip && mkdir -p /app/bin

COPY docker-cron-runner/xray-tools.sh .
RUN chmod +x /app/xray-tools.sh &&  \
    ./xray-tools.sh install_xray_core "$TARGETARCH" "/app/bin" "$XRAY_VERSION" && \
    ./xray-tools.sh update_geodata_in_docker "/app/bin"

# ========================================================
# Stage: Final Image of 3x-ui
# ========================================================
FROM alpine

WORKDIR /app

RUN apk add --no-cache \
  ca-certificates \
  tzdata \
  fail2ban \
  bash

COPY DockerEntrypoint.sh /app/
COPY --from=builder /app/build/ /app/
COPY --from=builder /app/x-ui.sh /usr/bin/x-ui
COPY --from=xray-downloader /app/bin /app/bin


# Configure fail2ban
RUN rm -f /etc/fail2ban/jail.d/alpine-ssh.conf \
  && cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local \
  && sed -i "s/^\[ssh\]$/&\nenabled = false/" /etc/fail2ban/jail.local \
  && sed -i "s/^\[sshd\]$/&\nenabled = false/" /etc/fail2ban/jail.local \
  && sed -i "s/#allowipv6 = auto/allowipv6 = auto/g" /etc/fail2ban/fail2ban.conf

RUN chmod +x \
  /app/DockerEntrypoint.sh \
  /app/x-ui \
  /usr/bin/x-ui

ENV XUI_ENABLE_FAIL2BAN="true"
EXPOSE 2053
VOLUME [ "/etc/x-ui" ]

ENTRYPOINT [ "/app/DockerEntrypoint.sh" ]