FROM heroku/heroku:20
RUN curl -sSL https://github.com/jpillora/chisel/releases/download/v1.7.6/chisel_1.7.6_linux_amd64.gz | zcat > /bin/chisel
RUN chmod +x /bin/chisel
RUN useradd -m heroku
USER heroku
EXPOSE 7860

#buildtime
RUN --mount=type=secret,id=PASSWORD,mode=0444,required=true \
  PASSWORD=$(cat /run/secrets/PASSWORD) \
  && export PASSWORD

#runtime
CMD chisel server --port 7860 --auth $PASSWORD --socks5 --reverse