| ADD alpine-minirootfs-3.24.1-x86_64.tar.gz / # buildkit |
| CMD ["/bin/sh"] |
| /bin/sh -c apk add --no-cache easy-rsa openssl ca-certificates curl && apk upgrade --no-cache |
| /bin/sh -c addgroup -g 10002 vpnsigner && adduser -S -u 10002 -G vpnsigner -H -s /sbin/nologin vpnsigner |
| COPY file:4734d1f24ceb4bb7d340732615da7f15943030830b032ee9ad6c09d76ea281c5 in /usr/local/bin/vpn-signer |
| ENV VPN_SIGNER_BIND=0.0.0.0:8080 VPN_SIGNER_EASYRSA_BIN=/usr/share/easy-rsa/easyrsa VPN_SIGNER_EASYRSA_DIR=/etc/openvpn/easy-rsa VPN_SIGNER_TA_KEY=/etc/openvpn/ta.key VPN_SIGNER_CRL_PUBLISH=/etc/openvpn/crl/crl.pem RUST_LOG=info |
| EXPOSE 8080 |
| USER vpnsigner:vpnsigner |
| HEALTHCHECK --interval=30s --timeout=5s --start-period=5s --retries=3 CMD curl -sf http://127.0.0.1:8080/healthz | grep -q ok || exit 1 |
| ENTRYPOINT ["/usr/local/bin/vpn-signer"] |
