FROM docker.m.daocloud.io/alpine:3.22@sha256:2e0b81d60597f449baa56dc25d355367869d2dca4cd57e866f1e2b52af3eb55f

RUN apk add --no-cache ca-certificates tzdata \
    && addgroup -S -g 1000 sw2 \
    && adduser -S -D -H -u 1000 -G sw2 sw2 \
    && mkdir -p /app/logs /app/uploads/file /app/uploads/chunks /data/conf \
    && chown -R sw2:sw2 /app /data/conf

ARG VERSION
LABEL org.opencontainers.image.revision=$VERSION
ENV TZ=Asia/Shanghai
COPY --chown=sw2:sw2 kratos-admin /app/kratos-admin
RUN chmod 0755 /app/kratos-admin
WORKDIR /app
USER sw2
EXPOSE 8000
HEALTHCHECK --interval=15s --timeout=5s --start-period=30s --retries=3 \
    CMD wget -q -O /dev/null http://127.0.0.1:8000/health || exit 1
CMD ["/app/kratos-admin", "-conf", "/data/conf"]