FROM alpine:3.11

LABEL maintainer="Robert Kaussow <mail@geeklabor.de>" \
    org.label-schema.name="bitwardenrs" \
    org.label-schema.version="1.2" \
    org.label-schema.vendor="Robert Kaussow" \
    org.label-schema.schema-version="1.0"

ARG VAULT_VERSION=2.12.0c
ARG VAULT_TARBALL=https://github.com/dani-garcia/bw_web_builds/releases/download/v${VAULT_VERSION}/bw_web_v${VAULT_VERSION}.tar.gz

RUN addgroup -g 101 -S app && \
    adduser -S -D -H -u 101 -h /app -s /sbin/nologin -G app -g app app && \
    apk --update add --virtual .build-deps tar curl && \
    apk --update add openssl postgresql-libs ca-certificates && \
    curl -SsL -o /usr/local/bin/gomplate https://github.com/hairyhenderson/gomplate/releases/download/v3.5.0/gomplate_linux-amd64-slim && \
    curl -SsL -o /usr/local/bin/url-parser https://github.com/xoxys/url-parser/releases/download/v0.1.0/url-parser-0.1.0-linux-amd64 && \
    curl -SsL -o /usr/local/bin/wait-for https://raw.githubusercontent.com/xoxys/wait-for/master/wait-for && \
    chmod 755 /usr/local/bin/gomplate && \
    chmod 755 /usr/local/bin/url-parser && \
    chmod 755 /usr/local/bin/wait-for && \
    mkdir -p /app/web-vault /app/data && \
    curl -SsL ${VAULT_TARBALL} | tar xz -C /app/web-vault && \
    apk del .build-deps && \
    rm -rf /var/cache/apk/* && \
    rm -rf /tmp/* && \
    chown -R app:app /app

ADD overlay/ /
ADD source/Rocket.toml /app
ADD source/target/x86_64-unknown-linux-musl/release/bitwarden_rs /app

VOLUME /app/data

EXPOSE 8080
EXPOSE 3012

USER app

STOPSIGNAL SIGTERM

ENTRYPOINT ["/usr/local/bin/entrypoint"]
HEALTHCHECK --interval=10s --timeout=3s --retries=3 CMD /usr/local/bin/healthcheck
WORKDIR /app
CMD []