FROM danielberteaud/java:17.24.3-5
MAINTAINER Daniel Berteaud <dbd@ehtrace.com>

ENV CLOUDBEAVER_WEB_CONFIG=/opt/cloudbeaver/conf/cloudbeaver.conf

RUN set -euxo pipefail &&\
    apk --no-cache add \
      ca-certificates \
      bash \
    &&\
    addgroup --gid 8978 cloudbeaver &&\
    adduser --system --ingroup cloudbeaver --disabled-password --uid 8978 --home /opt/cloudbeaver --shell /sbin/nologin cloudbeaver &&\
    mkdir -p /data/workspace /data/.eclipse &&\
    chown -R cloudbeaver:cloudbeaver /data

COPY --from=dbeaver/cloudbeaver:24.0.1 /opt/cloudbeaver /opt/cloudbeaver
COPY root/ /

RUN set -euxo pipefail &&\
    cd /opt/cloudbeaver &&\
    ln -sf /data/.eclipse ./.eclipse

WORKDIR /opt/cloudbeaver
VOLUME /data
USER cloudbeaver
EXPOSE 8978
CMD ["cloudbeaver"]