Add own nginx container that reloads on config changes

Sadly the standard nginx container image doesn't reload nginx if the
config is change. With out gvm-config approach the config might change
with an update of the gvm-config container image and without reloading
nginx the new config wouldn't be applied. Therefore we need an own nginx
container image that auto reloads if the config changes.

Author: bjoernricks

.github/workflows/container-nginx.yml

@@ -0,0 +1,79 @@
+name: Nginx Container Image Builds
+
+on:
+  push:
+    branches:
+      - main
+    tags:
+      - "v*"
+    paths:
+      - nginx/*
+      - .github/workflows/container-nginx.yml
+  pull_request:
+    branches:
+      - main
+    paths:
+      - nginx/*
+      - .github/workflows/container-nginx.yml
+  workflow_dispatch:
+  schedule:
+    # rebuild image every sunday
+    - cron: "0 0 * * 0"
+
+permissions:
+  contents: read
+  packages: write
+  id-token: write
+  pull-requests: write
+
+jobs:
+  nginx-images:
+    name: Build and upload Nginx container image
+    runs-on: self-hosted-generic
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+      - name: Login to ghcr.io
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - name: Login to Greenbone Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ vars.GREENBONE_REGISTRY }}
+          username: ${{ secrets.GREENBONE_REGISTRY_USER }}
+          password: ${{ secrets.GREENBONE_REGISTRY_TOKEN }}
+      - name: Setup container meta information
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: |
+            ghcr.io/greenbone/nginx
+            ${{ vars.GREENBONE_REGISTRY }}/community/nginx
+          labels: |
+            org.opencontainers.image.vendor=Greenbone
+            org.opencontainers.image.documentation=https://greenbone.github.io/docs/
+            org.opencontainers.image.base.name=nginx:stable-trixie
+          flavor: latest=false # no latest container tag for git tags
+          tags: |
+            # create container tag for git tags
+            type=ref,event=tag
+            type=ref,event=pr
+            # set latest for main branch pushes
+            type=raw,value=latest,enable={{is_default_branch}}
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+      - name: Build and push Container image
+        uses: docker/build-push-action@v6
+        with:
+          context: nginx
+          push: ${{ github.event_name != 'pull_request' }}
+          file: nginx/Dockerfile
+          platforms: linux/amd64,linux/arm64
+          labels: ${{ steps.meta.outputs.labels }}
+          tags: ${{ steps.meta.outputs.tags }}

nginx/40-auto-reload.sh

@@ -0,0 +1,17 @@
+#!/bin/sh
+
+set -e
+
+AUTO_RELOAD_FILES=${AUTO_RELOAD_FILES:-/etc/nginx/conf.d/*.conf /etc/nginx/nginx.conf}
+
+auto_reload() {
+    while inotifywait --event create,modify,delete --quiet ${AUTO_RELOAD_FILES}
+    do
+        printf "Detected change in %s, reloading Nginx...\n" "${AUTO_RELOAD_FILES}"
+        nginx -s reload
+    done
+}
+
+if [ -n "${AUTO_RELOAD_FILES}" ]; then
+    auto_reload &
+fi

nginx/Dockerfile

@@ -0,0 +1,9 @@
+ARG NGINX_VERSION=stable-trixie
+FROM nginx:$NGINX_VERSION
+
+RUN apt-get update && apt-get install --no-install-recommends --no-install-suggests -y \
+  inotify-tools \
+  && rm -rf /var/lib/apt/lists/*
+
+COPY 40-auto-reload.sh /docker-entrypoint.d/40-auto-reload.sh
+RUN chmod 755 /docker-entrypoint.d/40-auto-reload.sh