fix: run access_log as nginx user

Dockerfile

@@ -30,10 +30,7 @@ RUN mv /etc/nginx/access_logd_`access_log -v`.conf /etc/nginx/access_logd.conf
 RUN chown -R nginx:nginx /etc/nginx
 RUN nginx -t
 
-# access_logd runs as nobody but the socket can be written to by nginx
+RUN chown nginx:nginx /var/lib/access_log.sqlite3
-RUN delgroup nobody nobody
-RUN addgroup nobody www-data
-RUN chown nobody:www-data /var/lib/access_log.sqlite3
 
 # Shared configuration
 VOLUME /etc/nginx/sites

access_logd.sh

@@ -6,8 +6,20 @@ test -n "$ACCESS_LOGS_FLAGS" || exit 1
 # Give write access to Nginx
 umask 007
 
-# Copy default database
+pid=/run/access_logd.pid
-install -m 640 -o nobody /var/lib/access_log.sqlite3 /var/log/access_log.sqlite3
 
-# Read from fifo and load into database
+case $1 in
-daemonize -p /run/access_logd.pid -u nobody /usr/local/bin/syslogize /usr/bin/access_log $ACCESS_LOGS_FLAGS
+  start)
+    # Copy default database
+    install -m 640 -o nobody /var/lib/access_log.sqlite3 /var/log/access_log.sqlite3
+
+    # Read from fifo and load into database
+    daemonize -p /run/access_logd.pid -u nginx /usr/local/bin/syslogize /usr/bin/access_log $ACCESS_LOGS_FLAGS
+  ;;
+  stop)
+    test -f $pid || exit 0
+
+    cat $pid | xargs kill
+    rm $pid
+  ;;
+esac