anchor.diff:  RUN ln -sf /dev/stdout /srv/Portus/log/production.log
   
   # portus configuration
  -ADD database.yml secrets.yml /srv/Portus/config/
  +COPY database.yml secrets.yml /srv/Portus/config/
   
  -ADD init /
  -ADD check_db.rb /check_db.rb
  +COPY init /
  +COPY check_db.rb /check_db.rb
   
   EXPOSE 80 443
   
  
positive.code: RUN a2enmod rewrite
  RUN a2enmod ssl
  RUN a2enflag SSL
  ADD apache.conf /etc/apache2/vhosts.d/portus.conf
  
  # Custom certificates must be placed inside of /certificates,
  RUN rm -rf /etc/pki/trust/anchors && \
  
negative.code:     zypper clean -a
  
  # Add sudo rule that allows the wwwrun user to invoke update-ca-certificates
  COPY update-ca-certificates-sudoers /etc/sudoers.d/
  # Add sudo rule that allows the wwwrun user to invoke start_apache2; this
  # program is maintained by SUSE and will initialize Apache2 and ensure the httpd
  # daemon is run as wwwrun user.
  COPY start_apache2-sudoers /etc/sudoers.d/
  # Configure sudo to not wipe out all the existing env variables,
  # this would cause lots of troubles when starting Portus via our init
  # script
  