3x-ui/Dockerfile

73 lines
1.8 KiB
Docker

# ========================================================
# Stage: Builder
# ========================================================
FROM golang:1.25-alpine AS builder
WORKDIR /app
RUN apk add --no-cache \
build-base \
gcc
# docker CACHE
COPY go.mod go.sum ./
RUN go mod download
COPY . .
ENV CGO_ENABLED=1
ENV CGO_CFLAGS="-D_LARGEFILE64_SOURCE"
RUN go build -ldflags "-w -s" -o build/x-ui main.go
# ========================================================
# Stage: Xray downloader
# ========================================================
FROM alpine AS xray-downloader
ARG TARGETARCH
ARG XRAY_VERSION
WORKDIR /app
RUN apk add --no-cache wget unzip && mkdir -p /app/bin
COPY docker-cron-runner/xray-tools.sh .
RUN chmod +x /app/xray-tools.sh && \
./xray-tools.sh install_xray_core "$TARGETARCH" "/app/bin" "$XRAY_VERSION" && \
./xray-tools.sh update_geodata_in_docker "/app/bin"
# ========================================================
# Stage: Final Image of 3x-ui
# ========================================================
FROM alpine
WORKDIR /app
RUN apk add --no-cache \
ca-certificates \
tzdata \
fail2ban \
bash
COPY DockerEntrypoint.sh /app/
COPY --from=builder /app/build/ /app/
COPY --from=builder /app/x-ui.sh /usr/bin/x-ui
COPY --from=xray-downloader /app/bin /app/bin
# Configure fail2ban
RUN rm -f /etc/fail2ban/jail.d/alpine-ssh.conf \
&& cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local \
&& sed -i "s/^\[ssh\]$/&\nenabled = false/" /etc/fail2ban/jail.local \
&& sed -i "s/^\[sshd\]$/&\nenabled = false/" /etc/fail2ban/jail.local \
&& sed -i "s/#allowipv6 = auto/allowipv6 = auto/g" /etc/fail2ban/fail2ban.conf
RUN chmod +x \
/app/DockerEntrypoint.sh \
/app/x-ui \
/usr/bin/x-ui
ENV XUI_ENABLE_FAIL2BAN="true"
EXPOSE 2053
VOLUME [ "/etc/x-ui" ]
ENTRYPOINT [ "/app/DockerEntrypoint.sh" ]