Initial move from gist

nginx-prod/container.yaml

@@ -0,0 +1,35 @@
+---
+- vars:
+    author: Sysadmin42
+    name: nginx-production
+    version: 1.7.6-p1
+
+- package:
+    type: embedded
+    path: ./pkgs/nginx
+
+- sync:
+    src: ./files/nginx.conf
+    dest: /etc/nginx/nginx.conf
+    recursive: True
+    chmod: 0644
+
+- image:
+    type: aci
+    content: |
+        {
+            "acKind": "ImageManifest",
+            "acVersion": "0.6.1",
+            "name": "{{ name }}-{{ version }}",
+            "labels": [
+                {"name": "os", "value": "linux"},
+                {"name": "arch", "value": "amd64"}
+            ],
+            "app": {
+                "exec": [
+                    "/sbin/nginx"
+                ],
+                "user": "0",
+                "group": "0"
+            }
+        }

nginx-prod/files/nginx.conf

@@ -0,0 +1 @@
+DUMMY

nginx-prod/pkgs/nginx/patches/https-only.patch

@@ -0,0 +1 @@
+DUMMY

nginx-prod/pkgs/nginx/pkg.yaml

@@ -0,0 +1,10 @@
+---
+base: www-servers/nginx-1.7.6
+author: Sysadmin42 <sys@admin42.org>
+patches:
+    patches/https-only.patch: "This patch denies all plain http requests"
+    https://github.com/nginx/nginx/commit/52e4dc2f74fd032dace01acbe5eb29ddf7c1ad96.patch: "Fix buffer overruns"
+use:
+    with:
+        - ipv6
+        - selinux