trawl: alpine

Author: iakat

trawl/Dockerfile

@@ -1,19 +1,21 @@
-FROM debian:trixie-slim
-
-RUN apt-get update && \
-    apt-get install -y --no-install-recommends \
-        wireguard-tools iproute2 iptables \
-        rclone rsync lsyncd sshfs fuse3 \
-        openssh-client dropbear \
-        socat netcat-openbsd curl wget jq \
-        inotify-tools tcpdump mtr-tiny dnsutils \
-        procps strace tmux file less zstd && \
-    rm -rf /var/lib/apt/lists/* && \
+FROM alpine:3.23
+
+RUN apk add --no-cache \
+    tini bash \
+    wireguard-tools iproute2 iptables \
+    rclone rsync lsyncd sshfs fuse3 \
+    openssh-client-default dropbear \
+    socat netcat-openbsd curl wget jq \
+    inotify-tools tcpdump mtr bind-tools \
+    procps strace tmux file less zstd stunnel && \
     mkdir -p /etc/wireguard /data
 
 VOLUME ["/data", "/etc/wireguard"]
 EXPOSE 51820/udp
 
+HEALTHCHECK --interval=30s --timeout=5s \
+    CMD wg show | grep -q "latest handshake" || exit 1
+
 RUN cat > /entrypoint.sh << 'SCRIPT'
 #!/bin/bash
 set -e
@@ -27,7 +29,6 @@ cleanup() {
 }
 trap cleanup SIGTERM SIGINT
 
-# generate default wg0 only if no configs exist
 if ! ls /etc/wireguard/wg*.conf 2>/dev/null | grep -q .; then
     [ -f /etc/wireguard/privatekey ] || {
         wg genkey | tee /etc/wireguard/privatekey | wg pubkey > /etc/wireguard/publickey
@@ -37,17 +38,16 @@ if ! ls /etc/wireguard/wg*.conf 2>/dev/null | grep -q .; then
     cat > /etc/wireguard/wg0.conf << EOF
 [Interface]
 PrivateKey = $(cat /etc/wireguard/privatekey)
-Address = ${WG_IP:-192.168.192.2}/32
+Address = ${WG_IP:-100.87.143.201}/32
 ListenPort = 51820
 
 [Peer]
 PublicKey = ${WG_CLIENT_PUBKEY:-CHANGEME}
-AllowedIPs = ${WG_CLIENT_IP:-192.168.192.1}/32
+AllowedIPs = ${WG_CLIENT_IP:-100.87.143.1}/32
 EOF
     chmod 600 /etc/wireguard/wg0.conf
 fi
 
-# bring up all WG interfaces
 for conf in /etc/wireguard/wg*.conf; do
     [ -f "$conf" ] && wg-quick up "$(basename "${conf%.conf}")" && \
         echo "[INFO] up: $(basename "${conf%.conf}")"
@@ -57,4 +57,5 @@ exec ${CMD:-sleep infinity}
 SCRIPT
 
 RUN chmod +x /entrypoint.sh
+ENTRYPOINT ["/sbin/tini", "--"]
 CMD ["/entrypoint.sh"]