[gimp-web/oscp] Land a testing.docs.gimp.org build

[Andrea Veri <averi src gnome org>]

commit 613a2a1cd9d616dce91459a85f6e3711214b0927
Author: Andrea Veri <averi redhat com>
Date:   Wed Sep 8 11:50:40 2021 +0200

    Land a testing.docs.gimp.org build

 testing.docs.gimp.org/docs_build/Dockerfile        | 14 ++++++++
 testing.docs.gimp.org/docs_build/entrypoint.sh     | 12 +++++++
 testing.docs.gimp.org/httpd/Dockerfile             | 10 ++++++
 .../app_data/httpd-cfg/testing.docs.gimp.org.conf  | 41 ++++++++++++++++++++++
 4 files changed, 77 insertions(+)
---
diff --git a/testing.docs.gimp.org/docs_build/Dockerfile b/testing.docs.gimp.org/docs_build/Dockerfile
new file mode 100644
index 00000000..ad080a4e
--- /dev/null
+++ b/testing.docs.gimp.org/docs_build/Dockerfile
@@ -0,0 +1,14 @@
+FROM centos:7
+USER root
+
+RUN yum install -y docbook-dtds docbook-style-dsssl docbook-style-xsl rsync \
+                   docbook-utils-pdf docbook-utils git autoconf automake make \
+                   libxslt gettext python3
+
+RUN groupadd gimpdocs -g 1000580000 && \
+    useradd gimpdocs -g 1000580000 -u 1000580000 -r -l -m
+
+ADD entrypoint.sh /entrypoint.sh
+
+USER 1000580000
+ENTRYPOINT ["/entrypoint.sh"]
diff --git a/testing.docs.gimp.org/docs_build/entrypoint.sh b/testing.docs.gimp.org/docs_build/entrypoint.sh
new file mode 100755
index 00000000..a85cd666
--- /dev/null
+++ b/testing.docs.gimp.org/docs_build/entrypoint.sh
@@ -0,0 +1,12 @@
+#!/bin/bash
+
+set -x
+set -e
+
+git clone --depth 1 https://gitlab.gnome.org/GNOME/gimp-help.git /tmp/gimp-help
+export ALL_LINGUAS="ca da de el en en_GB es fi fr hr it ja ko lt nl nn pt_BR ro ru zh_CN"
+cd /tmp/gimp-help && ./autogen.sh --without-gimp && make
+
+for dir in html images quickreference xml; do
+    rsync -vlr /tmp/gimp-help/$dir/ /docs_data/docs/2.10test/$dir/
+done
diff --git a/testing.docs.gimp.org/httpd/Dockerfile b/testing.docs.gimp.org/httpd/Dockerfile
new file mode 100644
index 00000000..842bb8b2
--- /dev/null
+++ b/testing.docs.gimp.org/httpd/Dockerfile
@@ -0,0 +1,10 @@
+FROM centos/httpd-24-centos7
+USER root
+
+COPY app_data /opt/app-root/src
+RUN  chown -R 1000580000:1000580000 /opt/app-root/src
+
+EXPOSE 8080
+
+USER 1000580000
+ENTRYPOINT ["/usr/bin/run-httpd"]
diff --git a/testing.docs.gimp.org/httpd/app_data/httpd-cfg/testing.docs.gimp.org.conf 
b/testing.docs.gimp.org/httpd/app_data/httpd-cfg/testing.docs.gimp.org.conf
new file mode 100644
index 00000000..a425c6a1
--- /dev/null
+++ b/testing.docs.gimp.org/httpd/app_data/httpd-cfg/testing.docs.gimp.org.conf
@@ -0,0 +1,41 @@
+<VirtualHost *:8080>
+    ServerName testing.docs.gimp.org
+    ServerAlias testing-gimp-docs.openshift.gnome.org
+
+    ServerAdmin webmaster gimp org
+    DocumentRoot /docs_data/docs
+
+    Header always unset Content-Security-Policy
+
+    ##
+    # Headers relevant to security
+    ##
+
+    # Only connect to this site via HTTPS for the next year (recommended)
+    Header always set Strict-Transport-Security "max-age=31536000"
+
+    # Only allow my site to frame itself
+    Header always set X-Frame-Options "SAMEORIGIN"
+
+    # Block pages from loading when they detect reflected XSS attacks
+    Header always set X-XSS-Protection "1; mode=block"
+
+    # Prevent browsers from incorrectly detecting non-scripts as scripts
+    Header always set X-Content-Type-Options "nosniff"
+
+</VirtualHost>
+
+<Location />
+    BrowserMatchNoCase "HTTrack" bad_agent
+
+    Order Deny,Allow
+    Deny from env=bad_agent
+</Location>
+
+<Directory "/docs_data/docs">
+  Require all granted
+</Directory>
+
+<LocationMatch "^/.well-known/acme-challenge">
+  RedirectMatch ^(.*) https://letsencrypt.gnome.org$1
+</LocationMatch>