FROM alpine:3.22.2

LABEL Maintainer="Wolfgang Hottgenroth <woho@hottis.de>"
LABEL ImageName="knot-dns-hidden-primary"

RUN apk add --no-cache knot knot-utils bash git openssh-client-default

# Create necessary directories
RUN mkdir -p /etc/knot /var/lib/knot/keys /var/lib/knot/zones

# Copy configuration and zone files
COPY knot.conf /etc/knot/knot.conf
COPY my-dnssec-test-domain.de.zone /var/lib/knot/my-dnssec-test-domain.de.zone

# Set proper ownership
RUN chown -R knot:knot /etc/knot /var/lib/knot

VOLUME /etc/knot
VOLUME /var/lib/knot

USER knot

WORKDIR /var/lib/knot

EXPOSE 8053

CMD [ "/usr/sbin/knotd" ]