FROM registry.fk.jochum.dev/docker_hub_cache/library/debian:bullseye-slim

LABEL maintainer "René Jochum <rene@jochum.dev>"

ENV DEBIAN_FRONTEND noninteractive

# Configure Proxy
RUN set -ex; \
    apt-get update --allow-releaseinfo-change && \
    apt-get install -qy netcat-openbsd && \
    if [ -z "$APT_CACHER" ]; then APT_CACHER="apt-cacher.apt-cacher.svc.cluster.local"; fi && \
    if nc -w1 -z $APT_CACHER 3142 1>/dev/null 2>&1; then \
    echo 'Acquire::HTTP::Proxy "http://'$APT_CACHER':3142";' >> /etc/apt/apt.conf.d/01proxy && \
    echo 'Acquire::HTTPS::Proxy "false";' >> /etc/apt/apt.conf.d/01proxy; else exit 0; fi

# Install rspamd
RUN set -ex; \
    apt-get install --no-install-recommends -y -o 'DPkg::Options::=--force-confold' -o 'DPkg::Options::=--force-confdef' lsb-release wget ca-certificates gpg && \
    mkdir -p /etc/apt/keyrings && \
    wget -O- https://rspamd.com/apt-stable/gpg.key | gpg --dearmor > /etc/apt/keyrings/rspamd.gpg && \
    echo "deb [arch=amd64 signed-by=/etc/apt/keyrings/rspamd.gpg] http://rspamd.com/apt-stable/ `lsb_release -c -s` main" > /etc/apt/sources.list.d/rspamd.list && \
    echo "deb-src [arch=amd64 signed-by=/etc/apt/keyrings/rspamd.gpg] http://rspamd.com/apt-stable/ `lsb_release -c -s` main" >> /etc/apt/sources.list.d/rspamd.list && \
    apt-get update --allow-releaseinfo-change && \
    apt-get --no-install-recommends -y -o 'DPkg::Options::=--force-confold' -o 'DPkg::Options::=--force-confdef' install rspamd

# Remove proxy for future runs and lists for space
RUN set -ex; \ 
    rm -f /etc/apt/apt.conf.d/01proxy && \
    rm -rf /var/lib/apt/lists/*

# 11332 milter, 11334 web
EXPOSE 11332/tcp 11334/tcp

USER _rspamd
CMD ["/usr/bin/rspamd", "-c", "/etc/rspamd/rspamd.conf", "-f"]