FROM certbot/certbot:v1.12.0 

ARG USER_UUID=12000
ARG USER_GUID=12000
ARG GROUP_NAME=certbot
ARG USER_NAME=certbot

# http://linuxcommand.org/lc3_man_pages/seth.html
RUN set -eux; \
    addgroup -g $USER_GUID $GROUP_NAME; \
    adduser -u $USER_UUID -G $GROUP_NAME -s /sbin/nologin -D $USER_NAME;

# create temp dir for service
RUN mkdir -p /service/temp \
 && chown -R $USER_NAME:$GROUP_NAME /service/temp

# create and set permission mounts
RUN mkdir -p /service/html \
 && chown -R $USER_NAME:$GROUP_NAME /service/html \
 && mkdir -p /service/ssl \
 && chown -R $USER_NAME:$GROUP_NAME /service/ssl \
 && mkdir -p /service/letsencrypt/ssl \
 && chown -R $USER_NAME:$GROUP_NAME /service/letsencrypt/ssl \
 && mkdir -p /service/letsencrypt/work \
 && chown -R $USER_NAME:$GROUP_NAME /service/letsencrypt/work \
 && mkdir -p /service/letsencrypt/log \
 && chown -R $USER_NAME:$GROUP_NAME /service/letsencrypt/log

COPY ./files/entrypoint.sh /entrypoint.sh
RUN chmod +x /entrypoint.sh

USER $USER_NAME

ENTRYPOINT [ "/entrypoint.sh" ]