FROM ghcr.io/veloera/veloera:latest

USER root

RUN apk update && \
    apk add --no-cache ca-certificates && \
    rm -rf /var/cache/apk/*

COPY ca.pem /usr/local/share/ca-certificates/aiven-custom-ca.crt

RUN if [ -x /usr/sbin/update-ca-certificates ]; then update-ca-certificates; \
    elif [ -x /sbin/update-ca-certificates ]; then update-ca-certificates; \
    else echo "update-ca-certificates not found or not executed."; fi

RUN mkdir -p /data && \
    chown -R 1000:1000 /data