Use sponge due empty supervisor.conf and nginx.conf

.hadolint.yaml

@@ -0,0 +1,3 @@
+ignored:
+  - DL3008
+  - DL3015

Dockerfile

@@ -29,8 +29,8 @@ RUN groupadd "${APP_GRP}" \
 &&  apt-get -qq -y update \
 &&  apt-get install -qq -o Dpkg::Options::="--force-confold" \
                     -y --no-install-recommends \
-                    sudo supervisor gettext-base locales tzdata lsb-release \
-                    jq curl vim-nox openssh-client \
+                    supervisor curl jq vim-nox openssh-client \
+                    moreutils gettext-base locales tzdata lsb-release \
 &&  curl -sSL http://nginx.org/keys/nginx_signing.key | apt-key add - \
 &&  echo "deb http://nginx.org/packages/$(lsb_release -is | tr '[:upper:]' '[:lower:]')/ $(lsb_release -cs) nginx" > /etc/apt/sources.list.d/nginx.list \
 &&  apt-get -qq -y update \

entrypoint.sh

@@ -4,7 +4,7 @@
 
 set -euxo pipefail
 
-# shellcheck disable=SC2094,SC2016
-envsubst '${APP_USER} ${NGINX_WORKER}' < /etc/nginx/nginx.conf > /etc/nginx/nginx.conf
+# shellcheck disable=SC2016
+envsubst '${APP_USER} ${NGINX_WORKER}' < /etc/nginx/nginx.conf | sponge /etc/nginx/nginx.conf
 
-/usr/bin/supervisord -n -c /etc/supervisor/supervisord.conf
+exec /usr/bin/supervisord -n -c /etc/supervisor/supervisord.conf