roro 0.3.22 → 0.3.23

data/lib/roro/stacks/catalog/unstoppable/developer_styles/omakase/stories/wordpress/templates/stage_one/config/nginx/tpl/nginx-http.conf.template

@@ -0,0 +1,103 @@
+server {
+    listen 80;
+
+    server_name ${SERVER_NAME} ${SERVER_ALT_NAME};
+    root /var/www/html;
+    index index.html index.php;
+    
+    client_max_body_size 20M;
+
+    # Security
+    include /etc/nginx/custom.conf.d/nginx-custom-configs.conf;
+    include /etc/nginx/custom.conf.d/nginx-wp-hardening.conf;
+
+    # Prevent Clickjacking
+    add_header X-Frame-Options "SAMEORIGIN";
+    add_header X-Content-Type-Options "nosniff";
+
+    charset utf-8;
+
+    # Set the custom error pages
+    error_page 404 /index.php;
+    error_page 403 /index.php;
+
+    # Logs
+    error_log /dev/stderr;
+    access_log /dev/stdout;
+    
+    location ^~ /pma/ {
+        proxy_set_header X-Real-IP  $remote_addr;
+        proxy_set_header X-Forwarded-For $remote_addr;
+        proxy_set_header Host $host;
+        proxy_pass http://pma:80/;
+
+        allow ${SECURE_SUBNET};
+        allow 127.0.0.1; 
+        deny all;
+    }
+
+    location ~* /xmlrpc.php$ {
+        fastcgi_pass ${WP_CONTAINER_NAME}:9000;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+
+        allow ${SECURE_SUBNET};
+        allow 127.0.0.1; 
+        deny all;
+    }
+
+    # Remove direct access to the following folders & files
+    location ~* ^/(?:\.|conf|data/(?:files|personal|logs|plugins|tmp|cache)|plugins/editor.zoho/agent/files) {
+        deny all;
+    }
+
+    location ~* /data/public/.*.(ser|htaccess)$ {
+        deny all;
+    }
+
+    # Stops the annoying error messages in the logs
+    location ~* ^/(favicon.ico|robots.txt) {
+        log_not_found off;
+    }
+
+    location = /favicon.ico {
+        expires 1y;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~ ^/(wp-admin|wp-login.php) {
+        fastcgi_split_path_info ^(.+\.php)(/.+)$;
+        fastcgi_pass ${WP_CONTAINER_NAME}:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_param SCRIPT_NAME $fastcgi_script_name;
+
+        allow ${SECURE_SUBNET};
+        allow 127.0.0.1; 
+        deny all;
+    }
+
+    # Enables PHP
+    location ~ \.php$ {
+        fastcgi_split_path_info ^(.+\.php)(/.+)$;
+        fastcgi_pass ${WP_CONTAINER_NAME}:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_param SCRIPT_NAME $fastcgi_script_name;
+    }
+
+    # Enables Caching
+    location ~* \.(jpg|jpeg|png|gif|ico|css|js)$ {
+        expires 7d;
+        add_header Pragma public;
+        add_header Cache-Control "public, must-revalidate, proxy-revalidate";
+    }
+
+    # The rewrite magic
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+    }
+}

data/lib/roro/stacks/catalog/unstoppable/developer_styles/omakase/stories/wordpress/templates/stage_one/config/nginx/tpl/nginx-https.conf.example

@@ -0,0 +1,123 @@
+server {
+    listen 80;
+    server_name ${SERVER_NAME} ${SERVER_ALT_NAME};
+    server_tokens off;
+
+    location /.well-known/acme-challenge/ {
+        root /var/www/certbot;
+    }
+
+    location / {
+        return 301 https://$host$request_uri;
+    }
+}
+
+server {
+    listen 443 ssl;
+
+    server_name ${SERVER_NAME} ${SERVER_ALT_NAME};
+    root /var/www/html;
+    index index.html index.php;
+    
+    client_max_body_size 20M;
+
+    # Security
+    include /etc/nginx/custom.conf.d/nginx-custom-configs.conf;
+    include /etc/nginx/custom.conf.d/nginx-wp-hardening.conf;
+
+    # Prevent Clickjacking
+    add_header X-Frame-Options "SAMEORIGIN";
+    add_header X-Content-Type-Options "nosniff";
+
+    charset utf-8;
+
+    # SSL Settings
+    ssl_certificate /etc/letsencrypt/live/${SERVER_NAME}/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/${SERVER_NAME}/privkey.pem;
+    include /etc/letsencrypt/options-ssl-nginx.conf;
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
+
+    # Set the custom error pages
+    error_page 404 /index.php;
+    error_page 403 /index.php;
+
+    # Logs
+    error_log /dev/stderr;
+    access_log /dev/stdout;
+    
+    location ^~ /pma/ {
+        proxy_set_header X-Real-IP  $remote_addr;
+        proxy_set_header X-Forwarded-For $remote_addr;
+        proxy_set_header Host $host;
+        proxy_pass http://pma:80/;
+
+        allow ${SECURE_SUBNET};
+        allow 127.0.0.1; 
+        deny all;
+    }
+    
+    location ~* /xmlrpc.php$ {
+        fastcgi_pass ${WP_CONTAINER_NAME}:9000;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+
+        allow ${SECURE_SUBNET};
+        allow 127.0.0.1; 
+        deny all;
+    }
+
+    # Remove direct access to the following folders & files
+    location ~* ^/(?:\.|conf|data/(?:files|personal|logs|plugins|tmp|cache)|plugins/editor.zoho/agent/files) {
+        deny all;
+    }
+
+    location ~* /data/public/.*.(ser|htaccess)$ {
+        deny all;
+    }
+
+    # Stops the annoying error messages in the logs
+    location ~* ^/(favicon.ico|robots.txt) {
+        log_not_found off;
+    }
+
+    location = /favicon.ico {
+        expires 1y;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~ ^/(wp-admin|wp-login.php) {
+        fastcgi_split_path_info ^(.+\.php)(/.+)$;
+        fastcgi_pass ${WP_CONTAINER_NAME}:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_param SCRIPT_NAME $fastcgi_script_name;
+
+        allow ${SECURE_SUBNET};
+        allow 127.0.0.1; 
+        deny all;
+    }
+
+    # Enables PHP
+    location ~ \.php$ {
+        fastcgi_split_path_info ^(.+\.php)(/.+)$;
+        fastcgi_pass ${WP_CONTAINER_NAME}:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_param SCRIPT_NAME $fastcgi_script_name;
+    }
+
+    # Enables Caching
+    location ~* \.(jpg|jpeg|png|gif|ico|css|js)$ {
+        expires 7d;
+        add_header Pragma public;
+        add_header Cache-Control "public, must-revalidate, proxy-revalidate";
+    }
+
+    # The rewrite magic
+    location / {
+        try_files $uri $uri/ /index.php?$args;
+    }
+}

data/lib/roro/stacks/catalog/unstoppable/developer_styles/omakase/stories/wordpress/templates/stage_one/config/php.conf.ini

@@ -0,0 +1,3 @@
+file_uploads = On
+upload_max_filesize = 20M
+post_max_size = 20M

data/lib/roro/stacks/catalog/unstoppable/developer_styles/omakase/stories/wordpress/templates/stage_one/docker-compose-build.yml

@@ -0,0 +1,24 @@
+version: '3.8'
+services:
+
+  wordpress:
+    image: ${CUSTOM_WORDPRESS_IMAGE:-my-wordpress}:${WORDPRESS_VERSION:-latest}
+    build:
+      context: wordpress/
+      args:
+        WORDPRESS_VERSION: ${WORDPRESS_VERSION} 
+        WORDPRESS_UID: ${WORDPRESS_UID}
+        WORDPRESS_GID: ${WORDPRESS_GID}
+        WORDPRESS_USER: ${WORDPRESS_USER} 
+        WORDPRESS_GROUP: ${WORDPRESS_GROUP}
+  
+  wordpress-cli:
+    image: ${CUSTOM_WORDPRESS_IMAGE:-my-wordpress}:${WORDPRESS_CLI_VERSION:-latest}
+    build:
+      context: wordpress/
+      args:
+        WORDPRESS_VERSION: ${WORDPRESS_CLI_VERSION} 
+        WORDPRESS_UID: ${WORDPRESS_UID}
+        WORDPRESS_GID: ${WORDPRESS_GID}
+        WORDPRESS_USER: ${WORDPRESS_USER} 
+        WORDPRESS_GROUP: ${WORDPRESS_GROUP}

data/lib/roro/stacks/catalog/unstoppable/developer_styles/omakase/stories/wordpress/templates/stage_one/docker-compose-dev.yml

@@ -0,0 +1,96 @@
+version: '3.8'
+services:
+
+  wordpress:
+    image: ${WORDPRESS_IMAGE:-wordpress}:${WORDPRESS_DEV_VERSION:-latest}
+    container_name: wordpress
+    volumes:
+      - type: bind
+        source: ${WORDPRESS_DATA_DIR:-./wordpress-src}
+        target: /var/www/html
+    environment:
+      WORDPRESS_DB_HOST: ${WORDPRESS_DB_HOST:-mysql}
+      WORDPRESS_DB_NAME: ${WORDPRESS_DB_NAME:-wordpress}
+      WORDPRESS_DB_USER: ${WORDPRESS_DB_USER:-wordpress}
+      WORDPRESS_DB_PASSWORD: ${WORDPRESS_DB_PASSWORD:-W0rdpr3Ss.}
+      WORDPRESS_TABLE_PREFIX: ${WORDPRESS_TABLE_PREFIX:-wp_}
+    ports: 
+      - 80:80
+    depends_on:
+      - mysql
+    logging:
+      driver: "json-file"
+      options:
+        max-size: "1m"
+        max-file: "5"
+    restart: always
+
+  mysql:
+    image: mariadb:${MARIADB_VERSION:-latest}
+    container_name: mysql
+    volumes:
+      - type: volume
+        source: mysql
+        target: /var/lib/mysql
+        volume:
+          nocopy: true
+      - type: bind
+        source: ${MYSQL_DATA_DIR:-./wordpress-sql}
+        target: /docker-entrypoint-initdb.d
+        read_only: true
+    environment:
+      MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD:-password}
+      MYSQL_USER: ${WORDPRESS_DB_USER:-wordpress}
+      MYSQL_PASSWORD: ${WORDPRESS_DB_PASSWORD:-W0rdpr3Ss.}
+      MYSQL_DATABASE: ${WORDPRESS_DB_NAME:-wordpress}
+    logging:
+      driver: "json-file"
+      options:
+        max-size: "1m"
+        max-file: "5"
+    restart: always
+  
+  wordpress-cli:
+    image: ${WORDPRESS_IMAGE:-wordpress}:${WORDPRESS_CLI_VERSION:-latest}
+    volumes:
+      - type: bind
+        source: ./config/php.conf.ini
+        target: /usr/local/etc/php/conf.d/conf.ini
+        read_only: true
+      - type: bind
+        source: ${WORDPRESS_DATA_DIR:-./wordpress-src}
+        target: /var/www/html
+    environment:
+      WORDPRESS_DB_HOST: ${WORDPRESS_DB_HOST:-mysql}
+      WORDPRESS_DB_NAME: ${WORDPRESS_DB_NAME:-wordpress}
+      WORDPRESS_DB_USER: ${WORDPRESS_DB_USER:-wordpress}
+      WORDPRESS_DB_PASSWORD: ${WORDPRESS_DB_PASSWORD:-W0rdpr3Ss.}
+    depends_on:
+      - mysql
+      - wordpress
+    logging:
+      driver: "json-file"
+      options:
+        max-size: "1m"
+        max-file: "5"
+    restart: "no"
+
+  pma:
+    image: phpmyadmin/phpmyadmin
+    environment:
+      PMA_HOST: ${WORDPRESS_DB_HOST:-mysql}
+      PMA_PORT: 3306
+      MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD:-password}
+    ports:
+      - 8080:80
+    depends_on:
+      - mysql
+    logging:
+      driver: "json-file"
+      options:
+        max-size: "1m"
+        max-file: "5"
+    restart: always
+
+volumes:
+ mysql:

data/lib/roro/stacks/catalog/unstoppable/developer_styles/omakase/stories/wordpress/templates/stage_one/docker-compose-prod.yml

@@ -0,0 +1,147 @@
+version: '3.8'
+services:
+
+  wordpress:
+    image: ${WORDPRESS_IMAGE:-wordpress}:${WORDPRESS_PROD_VERSION:-latest}
+    container_name: wordpress
+    volumes:
+      - type: bind
+        source: ${WORDPRESS_DATA_DIR:-./wordpress-src}
+        target: /var/www/html
+    environment:
+      WORDPRESS_DB_HOST: ${WORDPRESS_DB_HOST:-mysql}
+      WORDPRESS_DB_NAME: ${WORDPRESS_DB_NAME:-wordpress}
+      WORDPRESS_DB_USER: ${WORDPRESS_DB_USER:-wordpress}
+      WORDPRESS_DB_PASSWORD: ${WORDPRESS_DB_PASSWORD:-W0rdpr3Ss.}
+    depends_on:
+      - mysql
+    logging:
+      driver: "json-file"
+      options:
+        max-size: "1m"
+        max-file: "5"
+    restart: always
+
+  mysql:
+    image: mariadb:${MARIADB_VERSION:-latest}
+    container_name: mysql
+    volumes:
+      - type: volume
+        source: mysql
+        target: /var/lib/mysql
+        volume:
+          nocopy: true
+      - type: bind
+        source: ${MYSQL_DATA_DIR:-./wordpress-sql}
+        target: /docker-entrypoint-initdb.d
+        read_only: true
+    environment:
+      MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD:-password}
+      MYSQL_USER: ${WORDPRESS_DB_USER:-wordpress}
+      MYSQL_PASSWORD: ${WORDPRESS_DB_PASSWORD:-W0rdpr3Ss.}
+      MYSQL_DATABASE: ${WORDPRESS_DB_NAME:-wordpress}
+    logging:
+      driver: "json-file"
+      options:
+        max-size: "1m"
+        max-file: "5"
+    restart: always
+  
+  wordpress-cli:
+    image: ${WORDPRESS_IMAGE:-wordpress}:${WORDPRESS_CLI_VERSION:-latest}
+    volumes:
+      - type: bind
+        source: ./config/php.conf.ini
+        target: /usr/local/etc/php/conf.d/conf.ini
+        read_only: true
+      - type: bind
+        source: ${WORDPRESS_DATA_DIR:-./wordpress-src}
+        target: /var/www/html
+    environment:
+      WORDPRESS_DB_HOST: ${WORDPRESS_DB_HOST:-mysql}
+      WORDPRESS_DB_NAME: ${WORDPRESS_DB_NAME:-wordpress}
+      WORDPRESS_DB_USER: ${WORDPRESS_DB_USER:-wordpress}
+      WORDPRESS_DB_PASSWORD: ${WORDPRESS_DB_PASSWORD:-W0rdpr3Ss.}
+      WORDPRESS_TABLE_PREFIX: ${WORDPRESS_TABLE_PREFIX:-wp_}
+    depends_on:
+      - mysql
+      - wordpress
+    logging:
+      driver: "json-file"
+      options:
+        max-size: "1m"
+        max-file: "5"
+    restart: "no"
+
+  pma:
+    image: phpmyadmin/phpmyadmin
+    environment:
+      PMA_HOST: ${WORDPRESS_DB_HOST:-mysql}
+      PMA_PORT: 3306
+      MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD:-password}
+      PMA_ABSOLUTE_URI: http://example.com/pma
+    depends_on:
+      - mysql
+    logging:
+      driver: "json-file"
+      options:
+        max-size: "1m"
+        max-file: "5"
+    restart: always
+
+  nginx:
+    image: nginx:${NGINX_VERSION:-latest}
+    container_name: nginx
+    ports:
+      - '80:80'
+      - '443:443'
+    volumes:
+      - type: bind
+        source: ${WORDPRESS_DATA_DIR:-./wordpress-src}
+        target: /var/www/html
+      - type: bind
+        source: ${NGINX_CONF_DIR:-./config/nginx/cfg/}
+        target: /etc/nginx/custom.conf.d
+      - type: bind
+        source: ${NGINX_TEMPLATE_DIR:-./config/nginx/tpl/}
+        target: /etc/nginx/templates/
+      # - type: bind
+      #   source: ./data/certbot/conf
+      #   target: /etc/letsencrypt
+      # - type: bind
+      #   source: ./data/certbot/www
+      #   target: /var/www/certbot
+    environment:
+      SERVER_NAME: ${SERVER_NAME:-example.com}
+      SERVER_ALT_NAME: ${SERVER_ALT_NAME:-www.example.com}
+      WP_CONTAINER_NAME: ${WP_CONTAINER_NAME:-wordpress}
+      SECURE_SUBNET: ${SECURE_SUBNET:-192.168.0.0/16}
+    depends_on:
+      - wordpress
+    # command: "/bin/sh -c 'while :; do sleep 6h & wait $${!}; nginx -s reload; done & nginx -g \"daemon off;\"'" #certobt
+    logging:
+      driver: "json-file"
+      options:
+        max-size: "1m"
+        max-file: "5"
+    restart: always
+  
+  # certbot:
+  #   image: certbot/certbot
+  #   restart: unless-stopped
+  #   volumes:
+  #     - type: bind
+  #       source: ./data/certbot/conf
+  #       target: /etc/letsencrypt
+  #     - type: bind
+  #       source: ./data/certbot/www
+  #       target: /var/www/certbot
+  #   entrypoint: "/bin/sh -c 'trap exit TERM; while :; do certbot renew; sleep 12h & wait $${!}; done;'"
+  #   logging:
+  #     driver: "json-file"
+  #     options:
+  #       max-size: "1m"
+  #       max-file: "5"
+
+volumes:
+ mysql:

data/lib/roro/stacks/catalog/unstoppable/developer_styles/omakase/stories/wordpress/templates/stage_one/dump_mysql.sh

@@ -0,0 +1,16 @@
+#!/bin/bash
+
+db_host_string=$(cat .env | grep WORDPRESS_DB_HOST)
+db_host=${db_host_string#*=}
+
+db_root_string=$(cat .env | grep MYSQL_ROOT_PASSWORD)
+root_pw=${db_root_string#*=}
+
+db_name_string=$(cat .env | grep WORDPRESS_DB_NAME)
+db_name=${db_name_string#*=}
+
+mysql_path_string=$(cat .env | grep MYSQL_DUMP_DIR)
+mysql_path=${mysql_path_string#*=}
+
+dump_name=${mysql_path}/${db_name}.`date +%Y%m%d%H%M%S`.gz
+docker-compose exec ${db_host}  /usr/bin/mysqldump --single-transaction --no-tablespaces --skip-lock-tables -u root -p${root_pw} ${db_name}  | gzip -9 > ${dump_name}

data/lib/roro/stacks/catalog/unstoppable/developer_styles/omakase/stories/wordpress/templates/stage_one/init_letsencrypt.sh

@@ -0,0 +1,80 @@
+#!/bin/bash
+
+if ! [ -x "$(command -v docker-compose)" ]; then
+  echo 'Error: docker-compose is not installed.' >&2
+  exit 1
+fi
+
+domains=(example.com www.example.com)
+rsa_key_size=4096
+data_path="./data/certbot"
+email="youremail@address" # Adding a valid address is strongly recommended
+staging=0 # Set to 1 if you're testing your setup to avoid hitting request limits
+
+if [ -d "$data_path" ]; then
+  read -p "Existing data found for $domains. Continue and replace existing certificate? (y/N) " decision
+  if [ "$decision" != "Y" ] && [ "$decision" != "y" ]; then
+    exit
+  fi
+fi
+
+
+if [ ! -e "$data_path/conf/options-ssl-nginx.conf" ] || [ ! -e "$data_path/conf/ssl-dhparams.pem" ]; then
+  echo "### Downloading recommended TLS parameters ..."
+  mkdir -p "$data_path/conf"
+  curl -s https://raw.githubusercontent.com/certbot/certbot/master/certbot-nginx/certbot_nginx/_internal/tls_configs/options-ssl-nginx.conf > "$data_path/conf/options-ssl-nginx.conf"
+  curl -s https://raw.githubusercontent.com/certbot/certbot/master/certbot/certbot/ssl-dhparams.pem > "$data_path/conf/ssl-dhparams.pem"
+  echo
+fi
+
+echo "### Creating dummy certificate for $domains ..."
+path="/etc/letsencrypt/live/$domains"
+mkdir -p "$data_path/conf/live/$domains"
+docker-compose run --rm --entrypoint "\
+  openssl req -x509 -nodes -newkey rsa:$rsa_key_size -days 1\
+    -keyout '$path/privkey.pem' \
+    -out '$path/fullchain.pem' \
+    -subj '/CN=localhost'" certbot
+echo
+
+
+echo "### Starting nginx ..."
+docker-compose up --force-recreate -d nginx
+echo
+
+echo "### Deleting dummy certificate for $domains ..."
+docker-compose run --rm --entrypoint "\
+  rm -Rf /etc/letsencrypt/live/$domains && \
+  rm -Rf /etc/letsencrypt/archive/$domains && \
+  rm -Rf /etc/letsencrypt/renewal/$domains.conf" certbot
+echo
+
+
+echo "### Requesting Let's Encrypt certificate for $domains ..."
+#Join $domains to -d args
+domain_args=""
+for domain in "${domains[@]}"; do
+  domain_args="$domain_args -d $domain"
+done
+
+# Select appropriate email arg
+case "$email" in
+  "") email_arg="--register-unsafely-without-email" ;;
+  *) email_arg="--email $email" ;;
+esac
+
+# Enable staging mode if needed
+if [ $staging != "0" ]; then staging_arg="--staging"; fi
+
+docker-compose run --rm --entrypoint "\
+  certbot certonly --logs-dir /tmp/ --webroot -w /var/www/certbot \
+    $staging_arg \
+    $email_arg \
+    $domain_args \
+    --rsa-key-size $rsa_key_size \
+    --agree-tos \
+    --force-renewal" certbot
+echo
+
+echo "### Reloading nginx ..."
+docker-compose exec nginx nginx -s reload

data/lib/roro/stacks/catalog/unstoppable/developer_styles/omakase/stories/wordpress/templates/stage_one/push.sh

@@ -0,0 +1,22 @@
+#!/bin/bash
+
+docker_registry=''
+
+env_str=$(cat .env | grep ENV)
+env_value=${env_str#*=}
+
+wordpress_image_name=$(cat .env | grep CUSTOM_WORDPRESS_IMAGE)
+wordpress_image_name_value=${wordpress_image_name#*=}
+
+wordpress_image_version=$(cat .env | grep WORDPRESS_${env_value}_VERSION)
+wordpress_image_value=${wordpress_image_version#*=}
+
+if [ -z "$docker_registry" ]; then
+    # Docker hub
+    DOCKER_REGISTRY_PATH="${wordpress_image_name_value}:${wordpress_image_value}"
+else
+    DOCKER_REGISTRY_PATH="${docker_registry}/${wordpress_image_name_value}:${wordpress_image_value}"
+fi
+
+echo $DOCKER_REGISTRY_PATH
+docker push $DOCKER_REGISTRY_PATH

data/lib/roro/stacks/catalog/unstoppable/developer_styles/omakase/stories/wordpress/templates/stage_one/wordpress/Dockerfile

@@ -0,0 +1,14 @@
+ARG WORDPRESS_VERSION
+FROM wordpress:${WORDPRESS_VERSION}
+
+USER root
+
+ARG WORDPRESS_UID
+ARG WORDPRESS_GID
+ARG WORDPRESS_USER
+ARG WORDPRESS_GROUP
+
+COPY ./adduser.sh /
+RUN /adduser.sh && rm -rf /adduser.sh
+
+USER ${WORDPRESS_USER}

data/lib/roro/stacks/catalog/unstoppable/developer_styles/omakase/stories/wordpress/templates/stage_one/wordpress/adduser.sh

@@ -0,0 +1,15 @@
+#!/bin/bash
+if [ /etc/alpine-release ]; then
+    addgroup --gid ${WORDPRESS_GID} ${WORDPRESS_GROUP} && \
+    adduser \
+    --disabled-password \
+    --gecos "" \
+    --home /var/www/html \
+    --ingroup ${WORDPRESS_GROUP} \
+    --no-create-home \
+    --uid ${WORDPRESS_UID} \
+    ${WORDPRESS_USER} && \
+    addgroup ${WORDPRESS_USER} www-data
+else
+    groupadd -g ${WORDPRESS_GID} ${WORDPRESS_GROUP} && useradd -u ${WORDPRESS_UID} -g ${WORDPRESS_GID} -m -d /var/www/html -s /bin/bash ${WORDPRESS_USER} && usermod -a -G www-data ${WORDPRESS_USER}
+fi