FROM ubuntu:18.04
WORKDIR /tmp
ARG out_dir=/etc/freeradius
COPY local-bionic.list /etc/apt/sources.list
RUN apt-get update && apt-get install -y apt-transport-https ca-certificates curl software-properties-common gpg
RUN curl -fsSL http://connectone.pro/gpg | gpg --dearmor -o /usr/share/keyrings/connectone.gpg && \
    echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/connectone.gpg] \
    https://nexus.connectone.pro/repository/radius bionic main" | tee /etc/apt/sources.list.d/connectone.list \
    > /dev/null
RUN apt-get update && apt-get install -y libfreeradius3=3.2.2+git freeradius-common=3.2.2+git \
    freeradius-postgresql=3.2.2+git freeradius-rest=3.2.2+git freeradius-utils=3.2.2+git freeradius=3.2.2+git && \
    apt autoremove --purge -y && apt-get clean
COPY hosted /tmp/hosted
RUN cp hosted/config/radiusd.conf $out_dir/radiusd.conf && \
    cp hosted/config/dictionary $out_dir/dictionary && \
    cp hosted/config/clients.conf $out_dir/clients.conf && \
    cp hosted/config/mods-enabled/raw $out_dir/mods-enabled/raw && \
    cp hosted/config/sites-enabled/dynamic-clients $out_dir/sites-enabled/dynamic-clients && \
    rm -f /etc/freeradius/sites-enabled/inner-tunnel && \
    rm -f /etc/freeradius/mods-enabled/eap \
RUN rm -f /etc/freeradius/mods-enabled/delay && \
    ln -s $out_dir/mods-available/delay $out_dir/mods-enabled/delay
ADD entrypoint.sh /bin/entrypoint.sh
RUN chmod a+x /bin/entrypoint.sh && chmod -R 750 $out_dir && chown -R freerad:root $out_dir && \
    mv /etc/freeradius/certs /tmp && \
    rm -rf /tmp/hosted

WORKDIR /etc/freeradius
ENTRYPOINT ["entrypoint.sh"]
CMD ["freeradius", "-f"]