FROM arm64v8/alpine:3.11.3 AS build

COPY dns-over-tls /dns-over-tls

RUN \
 apk add binutils && \
 strip /dns-over-tls

FROM arm64v8/alpine:3.11.3

ARG UID=991
ARG GID=991

RUN \
 apk add tini && \
 echo "Etc/UTC" > /etc/localtime && \
 mkdir -p /opt/dns && \
 addgroup --gid $GID dns && \
 adduser -D -u $UID -G dns -h /opt/dns dns && \
 echo "dns:`head /dev/urandom | tr -dc A-Za-z0-9 | head -c 24 | mkpasswd -s -m sha-256`" | chpasswd && \
 chown -R dns:dns /opt/dns

COPY --from=build /dns-over-tls /usr/bin/dns-over-tls

USER dns

EXPOSE 8080

ENTRYPOINT ["/sbin/tini", "--"]
CMD ["dns-over-tls"]