Switch reverse proxy to custom OpenResty Docker image, update paths in docker-compose.yml and nginx.conf

Dockerfile-openresty

@@ -0,0 +1,6 @@
+FROM openresty/openresty:alpine
+
+RUN apk add --no-cache git curl luarocks \
+  && luarocks install lua-resty-openidc \
+  && luarocks install lua-resty-session \
+  && luarocks install lua-cjson

docker-compose.yml

@@ -1,12 +1,12 @@
 services:
   reverse-proxy:
-    image: ghcr.io/zmartzone/lua-resty-openidc:latest
+    build: Dockerfile-openresty
     container_name: demo-nginx-proxy
     ports:
       - "25700:80"
     volumes:
-      - ./nginx.conf:/etc/nginx/nginx.conf:ro
+      - ./nginx.conf:/usr/local/openresty/nginx/conf/nginx.conf:ro
-      - ./auth.lua:/etc/nginx/auth.lua:ro
+      - ./auth.lua:/usr/local/openresty/nginx/conf/auth.lua:ro
     environment:
       - KEYCLOAK_CLIENT_SECRET=${KEYCLOAK_CLIENT_SECRET}
     env_file:

nginx.conf

@@ -35,7 +35,7 @@ http {
 
     # Protected root route (main site)
     location / {
-      access_by_lua_file /etc/nginx/auth.lua;
+      access_by_lua_file /usr/local/openresty/nginx/conf/auth.lua;
 
       proxy_pass http://main-website:3000;
       proxy_set_header Host $host;
@@ -46,7 +46,7 @@ http {
 
     # Protected demo route
     location /lawfirm/demo1/ {
-      access_by_lua_file /etc/nginx/auth.lua;
+      access_by_lua_file /usr/local/openresty/nginx/conf/auth.lua;
 
       rewrite ^/lawfirm/demo1(/.*)$ $1 break;
       proxy_pass http://ld1:3000;