FROM docker.io/goacme/lego:v4.5.3

RUN addgroup --system --gid 10000 letsencrypt
RUN adduser --system --uid 10000 --ingroup letsencrypt --home /var/lib/letsencrypt letsencrypt

RUN apk --no-cache --no-progress add su-exec
COPY container/run-lego /run-lego

ENTRYPOINT ["/run-lego"]