# syntax=docker/dockerfile:1

# {{ parent_stack }}.{{ layer_name }}'s base image. It was created without a source layer
# (`--set source_layer=<layer>` picks the base/ that fits that layer's image_base), so
# this is the image of an upstream release, as it is: name the one this layer publishes,
# pin it, and add what it needs. Each environment's overlay (<env>/Dockerfile) builds
# FROM it. NGINX_VERSION is the {version} IMAGE_TAGS in image.env may use.
ARG NGINX_VERSION=1.27
FROM nginxinc/nginx-unprivileged:${NGINX_VERSION}-alpine

# The upstream image's own non-root user, on its unprivileged port.
USER 101
EXPOSE 8080
