Nginx Changes-Over Alpine

Dockerfile

@@ -5,33 +5,36 @@ RUN apk update && apk upgrade && \
     apk add --no-cache nginx python3 python3-dev py3-pip build-base libffi-dev openssl-dev shadow gcc musl-dev ca-certificates
 
 # Create a group and user
-RUN addgroup -S appgroup && adduser -S appuser -G appgroup
+RUN addgroup -S nginx && adduser -S -G nginx appuser
+
+# Create necessary directories and set correct permissions (CRUCIAL FIX)
+RUN mkdir -p /var/www/html /var/log/nginx /run/nginx && \
+    chown -R nginx:nginx /var/lib/nginx /var/log/nginx /run/nginx && \
+    chown -R appuser:nginx /app /var/www/html
 
 # Set working directory
 WORKDIR /app
 
-# Copy requirements and install in ONE combined RUN command
+# Copy requirements and install
 COPY requirements.txt /app/
 RUN python3 -m venv /app/venv && \
     /app/venv/bin/pip install --no-cache-dir --upgrade pip && \
     /app/venv/bin/pip install --no-cache-dir -r requirements.txt && \
-    /app/venv/bin/pip list # Verify installation WITHIN THE SAME RUN COMMAND
+    /app/venv/bin/pip list
 
 # Copy the rest of the application code
 COPY . /app
 
-# Copy Nginx config
+# Copy Nginx config (default.conf - WITHOUT the http block)
 COPY nginx.conf /etc/nginx/conf.d/default.conf
 
-# Create necessary directories and set correct permissions
-RUN mkdir -p /var/www/html /var/log/nginx && \
-    chown -R nginx:nginx /var/log/nginx && \
-    chown -R appuser:appgroup /app /var/www/html
+# Remove the user directive from the main nginx.conf
+RUN sed -i '/^user /d' /etc/nginx/nginx.conf
 
 # Switch to non-root user
 USER appuser
 
 EXPOSE 7860
 
-# Start Nginx and your application (using exec and the correct Python path)
+# Start Nginx and your application
 CMD ["sh", "-c", "exec /app/venv/bin/python -u -m FileStream & nginx -g 'daemon off;'"]

nginx.conf

@@ -1,22 +1,20 @@
-http { # The crucial http block
-    server {
-        listen 7860;
+server {
+    listen 7860;
 
-        proxy_buffering off;
-        proxy_cache off;
-        sendfile on;
-        tcp_nopush on;
-        tcp_nodelay on;
+    proxy_buffering off;
+    proxy_cache off;
+    sendfile on;
+    tcp_nopush on;
+    tcp_nodelay on;
 
-        location / {
-            proxy_pass http://127.0.0.1:8080;
-            proxy_set_header Host $host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header Range $http_range;
-            proxy_set_header If-Range $http_if_range;
+    location / {
+        proxy_pass http://127.0.0.1:8080;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header Range $http_range;
+        proxy_set_header If-Range $http_if_range;
 
-            add_header Accept-Ranges bytes;
-        }
+        add_header Accept-Ranges bytes;
     }
 }