proxy/Dockerfile.ubi

Rama main · réplica de lectura del repositorio original.

FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:2d4c4551af6831dcd26bbf86108c4385de5183ec8fe6b5868f6f9640fe47f4ed

ARG TARGETPLATFORM
ARG VERSION=dev
ARG RELEASE=1

LABEL name="netbird-reverse-proxy" \
      maintainer="NetBird <dev@netbird.io>" \
      vendor="NetBird GmbH" \
      version="${VERSION}" \
      release="${RELEASE}" \
      summary="NetBird Reverse Proxy" \
      description="NetBird Reverse Proxy provides an identity-aware entrypoint to services in NetBird networks."

COPY --chmod=0555 ${TARGETPLATFORM}/netbird-proxy /go/bin/netbird-proxy
COPY licenses/ /licenses/
# Only the writable directories share the root group for arbitrary non-root UIDs.
# Runtime-created private keys retain the application's restrictive file modes.
RUN mkdir -p /var/lib/netbird /certs && \
    chown 1000:0 /var/lib/netbird /certs && \
    chmod 0770 /var/lib/netbird /certs && \
    chmod -R a+rX /licenses

USER 1000:0
ENV HOME=/var/lib/netbird
ENV NB_PROXY_ADDRESS=":8443"
# Unprivileged ports: runtimes such as OpenShift and Podman keep the kernel
# default that reserves ports below 1024 for root. 8080 is the health probe.
ENV NB_PROXY_ACME_ADDRESS=":8081"
EXPOSE 8443
STOPSIGNAL SIGTERM
ENTRYPOINT ["/go/bin/netbird-proxy"]