anchor.diff:  COPY nginx/nginx.vh.control-default.conf /etc/nginx/control-default.conf.template
   COPY nginx/acme-client.sh /etc/periodic/weekly/acme-client.sh
   COPY nginx/acme-config.yml /etc/nginx/acme-config.template
  +COPY docker-entrypoint.sh /
  +# thanks to https://github.com/jwilder/nginx-proxy/blob/master/Dockerfile.alpine
   
  -RUN chmod a+x /etc/periodic/weekly/acme-client.sh
  -
  -# thanks to https://github.com/jwilder/nginx-proxy/blob/master/Dockerfile.alpine
  -ENV DOCKER_HOST unix:///tmp/docker.sock
  -
  -COPY docker-entrypoint.sh /
  -RUN chmod a+x /docker-entrypoint.sh
  -
  -ENV LANG en_US.utf8
   
   # ==========================================
   # ssh
  
positive.code: ENV COMPANY "Example Inc."
  ENV COUNTRY "MY"
  ENV GENERATE_SSL "0"
  # ==========================================
  # finalize
  
  RUN adduser -h /home/app -D -s /bin/bash -g app,sudo app
  #RUN usermod -a -G app,sudo app
  
  RUN mkdir -p /home/app/web
  RUN mkdir -p /home/app/.ssh
  RUN touch /home/app/.ssh/authorized_keys
  RUN chmod 600 /home/app/.ssh/authorized_keys
  RUN chmod 700 /home/app/.ssh
  RUN chown -R app:app /home/app
  
  #nginx, ssl
  EXPOSE 80 443 3000 2022
  
negative.code: # COPY wkhtmltopdf /bin
  # RUN chmod a+x /bin/wkhtmltopdf
  
  
  # thanks to: https://github.com/nginxinc/docker-nginx/blob/master/stable/alpine/Dockerfile
  
  