Merge pull request #183 from balena-io/trixie

Update balena/open-balena-base to v20.0.0, haproxy to 1.28

Author: Page-

Dockerfile

@@ -1,4 +1,4 @@
-FROM balena/open-balena-base:19.2.1-s6-overlay
+FROM balena/open-balena-base:20.0.0-s6-overlay
 
 # Install gnupg to allow us to add the nginx signing key
 # hadolint ignore=DL3008
@@ -7,14 +7,14 @@ RUN apt-get update \
 		gnupg \
 	&& rm -rf /var/lib/apt/lists/*
 
-ENV NGINX_VERSION=1.24.0-1~bookworm
+# renovate: datasource=repology depName=debian_13/nginx versioning=loose
+ARG NGINX_VERSION=1.28.0-1~trixie
 
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 
-# Note that we stop nginx from being available in systemd, as we run it manually in downstream images
 # hadolint ignore=DL3008
-RUN wget -q -O - https://nginx.org/keys/nginx_signing.key | apt-key add - \
-	&& echo 'deb http://nginx.org/packages/debian/ bookworm nginx' >> /etc/apt/sources.list \
+RUN wget -q -O /etc/apt/trusted.gpg.d/nginx.asc https://nginx.org/keys/nginx_signing.key \
+	&& echo 'deb http://nginx.org/packages/debian/ trixie nginx' >> /etc/apt/sources.list \
 	&& apt-get update -y \
 	&& apt-get install -y --no-install-recommends rpl chromium nginx=${NGINX_VERSION} \
 	&& rm /etc/init.d/nginx \