#FROM alpine:3.17.0
FROM alpine:edge
MAINTAINER Rich Braun "docker@instantlinux.net"
ARG BUILD_DATE
ARG VCS_REF
LABEL org.label-schema.build-date=$BUILD_DATE \
    org.label-schema.license=GPL-3.0 \
    org.label-schema.name=samba-dc \
    org.label-schema.vcs-ref=$VCS_REF \
    org.label-schema.vcs-url=https://github.com/instantlinux/docker-tools

ENV ADMIN_PASSWORD_SECRET=samba-admin-password \
    ALLOW_DNS_UPDATES=secure \
    BIND_INTERFACES_ONLY=yes \
    DOMAIN_ACTION=provision \
    INTERFACES="lo eth0" \
    LOG_LEVEL=1 \
    MODEL=standard \
    NETBIOS_NAME= \
    REALM=ad.example.com \
    SERVER_STRING="Samba Domain Controller" \
    TZ=UTC \
    WINBIND_USE_DEFAULT_DOMAIN=yes \
    WORKGROUP=AD \
    SYSVOL_DISABLE_SYNC=no \
    SYSVOL_SSH_PORT=8322 \
    SYSVOL_SSH_KEY_SECRET=samba-ssh-key \
    SYSVOL_SSH_PUB_SECRET=samba-ssh-pub

COPY *.conf.j2 /root/
COPY entrypoint.sh /usr/local/bin/
RUN apk add --update --no-cache krb5 ldb-tools samba-dc tdb \
      bind bind-libs bind-tools libxml2 tzdata && \
    chmod 0755 /usr/local/bin/entrypoint.sh

VOLUME /etc/samba /var/lib/samba
EXPOSE 53 53/udp 88 88/udp 135 137-138/udp 139 389 389/udp 445 464 464/udp 636 3268-3269 49152-65535

HEALTHCHECK --interval=30s --timeout=10s CMD (smbclient -L \\localhost -U % -m SMB3 && netstat -ltn | grep -c 135) || exit 1

ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]