FROM alpine:3.13 AS builder

RUN \
  apk update && \
  apk add alpine-sdk && \
  apk add nghttp2-libs && \
  apk add nghttp2-dev && \
  apk add openssl-dev && \
  apk add expat-dev && \
  apk add libevent-dev && \
  apk add libsodium-dev && \
  mkdir build && \
  cd build && \
  git clone https://github.com/NLnetLabs/unbound.git && \
  cd unbound && \
  ./configure --with-libsodium --with-libnghttp2 --with-libevent --enable-sha2 --enable-dnscrypt ---prefix /opt/unbound && \
  make && \
  make install



FROM alpine:3.13
COPY --from=builder /opt/unbound/ /opt/unbound

RUN \
  apk add --no-cache openssl && \
  apk add --no-cache nghttp2-libs && \
  apk add --no-cache expat && \
  apk add --no-cache libevent && \
  apk add --no-cache libsodium && \
  adduser -D unbound && \
  mv /opt/unbound/etc/unbound/unbound.conf /opt/unbound/etc/unbound/unbound.conf-dist && \
  ln -s /opt/unbound/etc/unbound /etc/unbound

 COPY unbound.conf /opt/unbound/etc/unbound/unbound.conf

EXPOSE 53/udp
EXPOSE 53/tcp
EXPOSE 853/tcp

VOLUME /opt/unbound/etc/unbound

CMD [ "/opt/unbound/sbin/unbound" ]