build/Dockerfile

@@ -2,7 +2,7 @@
 # build AB-NGINX container (based on NGINX mainline)
 #
 
-ARG NGINX_VERSION=1.21.3
+ARG NGINX_VERSION=1.21.1
 FROM nginx:${NGINX_VERSION}-alpine
 ARG NGINX_VERSION
 
@@ -21,10 +21,7 @@ RUN addgroup --gid ${GID} www-docker \
         --uid ${UID} \
         www-docker
 
-# add libcap and allow nginx to bind to ports <1024;
-# extract fun error pages;
-# create /certs directory for auto-generation;
-# create LetsEncrypt challenge directory outside webroot
+# add libcap, allow nginx to bind to ports <1024, extract fun error pages & create LetsEncrypt challenge directory outside webroot
 RUN apk --update --no-cache add \
     libcap \
     openssl \
@@ -38,7 +35,6 @@ RUN apk --update --no-cache add \
     && rm -rf /tmp/* \
     && rm -rf /docker-entrypoint.d \
     && rm -f /docker-entrypoint.sh \
-    && mkdir /certs \
     && mkdir /usr/share/nginx/letsencrypt
 
 # health check
@@ -81,8 +77,6 @@ RUN chown -R www-docker:www-docker /usr/share/nginx \
     && find /etc/nginx -type f -exec chmod 640 {} \; \
     && chown www-docker:www-docker /var/cache/nginx \
     && chown www-docker:www-docker /var/log/nginx \
-    && chown www-docker:www-docker /certs \
-    && chmod 700 /certs \
     && chmod 644 /etc/selfsigned.cnf \
     && chmod 755 /usr/local/bin/generate-cert /usr/local/bin/entrypoint.sh
 USER www-docker