Containerfile

# SPDX-FileCopyrightText: © 2026 Nfrastack <code@nfrastack.com>
#
# SPDX-License-Identifier: MIT

ARG \
    BASE_IMAGE

FROM ${BASE_IMAGE}

LABEL \
        org.opencontainers.image.title="Zerotier" \
        org.opencontainers.image.description="Virtual ethernet switch and Administation Console" \
        org.opencontainers.image.url="https://hub.docker.com/r/nfrastack/zerotier" \
        org.opencontainers.image.documentation="https://github.com/nfrastack/container-zerotier/blob/main/README.md" \
        org.opencontainers.image.source="https://github.com/nfrastack/container-zerotier.git" \
        org.opencontainers.image.authors="Nfrastack <code@nfrastack.com>" \
        org.opencontainers.image.vendor="Nfrastack <https://www.nfrastack.com>" \
        org.opencontainers.image.licenses="MIT"

ARG \
    ZEROTIER_VERSION="1.16.2" \
    ZT_NET_VERSION="v0.8.3" \
    ZEROTIER_REPO_URL=https://github.com/zerotier/ZeroTierOne \
    ZT_NET_REPO_URL=https://github.com/sinamics/ztnet

COPY CHANGELOG.md /usr/src/container/CHANGELOG.md
COPY LICENSE /usr/src/container/LICENSE
COPY README.md /usr/src/container/README.md

ENV \
    CONTAINER_ENABLE_MESSAGING=FALSE \
    IMAGE_NAME="nfrastack/zerotier" \
    IMAGE_REPO_URL="https://github.com/nfrastack/container-zerotier/"

COPY build-assets/ /build-assets

RUN echo "" && \
    BUILD_ENV=" \
                 10-nginx/ENABLE_NGINX=FALSE \
                 10-nginx/NGINX_SITE_ENABLED=ztnet \
                 10-nginx/NGINX_SITE_ZTNET_MODE=proxy \
                 10-nginx/NGINX_SITE_ZTNET_PROXY_URL=[env:UI_PROTOCOL]://localhost:[env:UI_LISTEN_PORT] \
                 10-nginx/NGINX_SITE_ZTNET_HEADER_XFRAME_NAME=X-Frame-Options \
                 10-nginx/NGINX_SITE_ZTNET_HEADER_XFRAME_VALUE=SAMEORIGIN \
                 10-nginx/NGINX_SITE_ZTNET_HEADER_XROBOTS_NAME=X-Content-Type-Options \
                 10-nginx/NGINX_SITE_ZTNET_HEADER_XROBOTS_VALUE=nosniff \
                 10-nginx/NGINX_SITE_ZTNET_HEADER_XCONTENT_NAME=X-Content-Type-Options \
                 10-nginx/NGINX_SITE_ZTNET_HEADER_XCONTENT_VALUE=nosniff \
                 10-nginx/NGINX_SITE_ZTNET_HEADER_XSS_NAME=X-XSS-Protection \
                 10-nginx/NGINX_SITE_ZTNET_HEADER_XSS_VALUE=1; mode=block \
              " \
              && \
    ZEROTIER_BUILD_DEPS_ALPINE=" \
                                binutils \
                                build-base \
                                git \
                                linux-headers \
                            " \
                        && \
    ZEROTIER_RUN_DEPS_ALPINE=" \
                                iptables \
                                libc6-compat \
                                libstdc++ \
                            " \
                        && \
    ZT_NET_BUILD_DEPS_ALPINE=" \
                                zip \
                            " \
                        && \
    ZT_NET_RUN_DEPS_ALPINE=" \
                                moreutils \
                                nodejs \
                                npm \
                                postgresql-client \
                            " \
                        && \
    source /container/base/functions/container/build && \
    container_build_log image && \
    create_user zerotier 9376 zerotier 9376 /dev/null && \
    package update && \
    package upgrade && \
    package install \
                        ZEROTIER_BUILD_DEPS \
                        ZEROTIER_RUN_DEPS \
                        ZT_NET_BUILD_DEPS \
                        ZT_NET_RUN_DEPS \
                        && \
    package build go buildtime && \
    \
    clone_git_repo "${ZEROTIER_REPO_URL}" "${ZEROTIER_VERSION}" /usr/src/zerotier && \
    build_assets src /build-assets/zerotier/src "${GIT_REPO_SRC_ZEROTIER}" && \
    build_assets scripts /build-assets/zerotier/scripts && \
    \
    cd /usr/src/zerotier && \
    sed -i "s|ZT_SSO_SUPPORTED=1|ZT_SSO_SUPPORTED=0|g" make-linux.mk && \
    make -j $(nproc) -f make-linux.mk ZT_NONFREE=1 ZT_CONTROLLER=0 && \
    make install && \
    rm -rf /var/lib/zerotier-one && \
    container_build_log add "Zerotier" "${ZEROTIER_VERSION}" "${ZEROTIER_REPO_URL}" && \
    \
    clone_git_repo "${ZT_NET_REPO_URL}" "${ZT_NET_VERSION}" /usr/src/ztnet && \
    build_assets src /build-assets/zt-net/src /usr/src/ztnet && \
    build_assets scripts /build-assets/zt-net/scripts && \
    cd /usr/src/ztnet/ztnodeid && \
    go mod tidy && \
    go build -ldflags='-s -w' -trimpath -o /usr/local/bin/ztmkworld cmd/mkworld/main.go && \
    cd /usr/src/ztnet && \
    npm install \
            @prisma/client@6.19.3 \
            @paralleldrive/cuid2 \
            && \

    npm install -g \
                prisma@6.19.3 \
                ts-node \
                && \
    npx prisma generate && \
    npm ci && \
    SKIP_ENV_VALIDATION=1 npm run build:webpack && \
    mkdir -p /app/.next && \
    cp next.config.mjs package.json /app/ && \
    cp -R \
            public \
            prisma \
        /app/ && \
    cp -R \
            .next/server \
            .next/static \
        /app/.next/ && \
    cp -R \
            .next/standalone/. \
        /app/ && \
    cp -R \
            .next/BUILD* \
            .next/*.json \
        /app/.next/ && \
    cd /app && \
    rm -rf node_modules && \
    npm install --production && \
    npm install daisyui@^4.12.24 && \
    container_build_log add "ZT Net" "${ZT_NET_VERSION}" "${ZT_NET_REPO_URL}" && \
    echo "${ZT_NET_VERSION}" > /app/.ztnet-version && \
    chown -R zerotier:zerotier /app && \
    \
    package remove \
                    ZEROTIER_BUILD_DEPS \
                    ZT_NET_BUILD_DEPS \
                    && \
    package cleanup

EXPOSE 3000
EXPOSE 9993/udp

COPY rootfs /