FROM debian:bookworm-slim
RUN apt-get update && apt-get install -y --no-install-recommends ca-certificates libssl3 \
 && rm -rf /var/lib/apt/lists/* \
 && groupadd --system --gid 10001 wnd \
 && useradd --system --uid 10001 --gid wnd --home-dir /var/lib/wnd-gateway --shell /usr/sbin/nologin wnd \
 && mkdir -p /etc/wnd-gateway /var/lib/wnd-gateway \
 && chown wnd:wnd /var/lib/wnd-gateway
COPY --chmod=0755 wnd-gateway /usr/local/bin/wnd-gateway
USER wnd
ENV WND_GATEWAY_CONFIG=/etc/wnd-gateway/gateway.toml
VOLUME ["/var/lib/wnd-gateway"]
EXPOSE 8443
STOPSIGNAL SIGTERM
HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 CMD ["wnd-gateway", "health-check"]
ENTRYPOINT ["wnd-gateway"]
CMD ["run"]
