FROM docker.io/goacme/lego:v4.3.1

RUN addgroup --system --gid 10000 letsencrypt
RUN adduser --system --uid 10000 --ingroup letsencrypt --home /var/lib/letsencrypt letsencrypt

USER letsencrypt