ARG BASE_REGISTRY=registry1.dso.mil
ARG BASE_IMAGE=ironbank/redhat/ubi/ubi8
ARG BASE_TAG=8.7

FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}

COPY vault.zip /tmp
COPY scripts/docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh

RUN dnf update -y && \
  dnf install -y unzip && \
  dnf clean all && \
  unzip -d /bin /tmp/vault.zip && \
  chmod +x /bin/vault && \
  chmod 755 /usr/local/bin/docker-entrypoint.sh && \
  rm /tmp/vault.zip && \
  groupadd -g 1001 vault && \
  useradd -r -u 1001 -m -s /sbin/nologin -g vault vault && \
  mkdir -p /vault/logs && \
  mkdir -p /vault/file && \
  mkdir -p /vault/config && \
  chown -R vault:vault /vault

EXPOSE 8200
USER vault

HEALTHCHECK --interval=5m --timeout=30s --start-period=1m --retries=3 \
  CMD curl -f http://localhost:8200/v1/sys/health?standbyok=true || exit 1

ENTRYPOINT ["docker-entrypoint.sh"]
CMD ["vault"]