FROM rockylinux:10

RUN dnf install -y epel-release && \
    dnf copr enable -y @caddy/caddy && \
    dnf install -y \
    caddy \
    cgit \
    git \
    fcgiwrap \
    gettext \
    openssl \
    openssh-server \
    && dnf clean all

COPY cgitrc.template /etc/cgitrc.template
COPY Caddyfile /etc/caddy/Caddyfile
COPY sshd_config /etc/ssh/sshd_config
COPY entrypoint.sh /entrypoint.sh
RUN chmod +x /entrypoint.sh

# 80 required for Let's Encrypt HTTP-01 challenge, 443 for HTTPS, 22 for git SSH
EXPOSE 80 443 22

ENTRYPOINT ["/entrypoint.sh"]