Dockerfile.letsencrypt

ARG VPL_BASE_DISTRO=debian

FROM ${VPL_BASE_DISTRO}

USER root:root

# Using HTTP and HTTPS
# Set default install levels: minimum < basic < standard < full
ARG VPL_INSTALL_LEVEL="standard"
ARG VPL_JAIL_JAILPATH=/
ARG VPL_JAIL_PORT=0
ARG VPL_JAIL_SECURE_PORT
ARG VPL_CERTIFICATES_DIR="/etc/vpl/ssl"
ARG VPL_SERVER_NAME
ARG VPL_JAIL_SSL_CERT_FILE="${VPL_CERTIFICATES_DIR}/live/${VPL_SERVER_NAME:?Error}/fullchain.pem"
ARG VPL_JAIL_SSL_KEY_FILE="${VPL_CERTIFICATES_DIR}/live/${VPL_SERVER_NAME}/privkey.pem"
ARG VPL_JAIL_CERTBOT_WEBROOT_PATH="/etc/vpl/certbot_challenge"

ENV VPL_JAIL_JAILPATH="${VPL_JAIL_JAILPATH}"
ENV VPL_JAIL_PORT=${VPL_JAIL_PORT}
ENV VPL_JAIL_SECURE_PORT=${VPL_JAIL_SECURE_PORT}
ENV VPL_JAIL_SSL_CERT_FILE="${VPL_JAIL_SSL_CERT_FILE}"
ENV VPL_JAIL_SSL_KEY_FILE="${VPL_JAIL_SSL_KEY_FILE}"
ENV VPL_JAIL_CERTBOT_WEBROOT_PATH="${VPL_JAIL_CERTBOT_WEBROOT_PATH}"

# Copy installer
COPY . /vpl-jail-system
WORKDIR /vpl-jail-system

# Install bash on distros with no bash
RUN /vpl-jail-system/install-bash-sh

RUN /vpl-jail-system/install-vpl-sh noninteractive ${VPL_INSTALL_LEVEL}

# Remove installer
WORKDIR /
RUN rm -R vpl-jail-system

VOLUME [ "${VPL_CERTIFICATES_DIR}" ]
VOLUME [ "${VPL_JAIL_CERTBOT_WEBROOT_PATH}" ]
EXPOSE 80 443

STOPSIGNAL SIGTERM

CMD ["/usr/sbin/vpl/vpl-jail-system", "start_foreground"]