FROM debian:bookworm

MAINTAINER Roman VANICEK <roman.vanicek@ivasoft.cz>

ENV ADMIN_PASSWORD_SECRET=samba-admin-password \
    ADMIN_ACCOUNT=Administrator \
    BIND_INTERFACES_ONLY=yes \
    INTERFACES="lo eth0" \
    LOG_LEVEL=1 \
    MODEL=standard \
    NETBIOS_NAME= \
    REALM=ad.example.com \
    DOMAIN=ed.example.com \
    SERVER_STRING="Samba Member Server" \
    TZ=UTC \
    WINBIND_USE_DEFAULT_DOMAIN=yes \
    WORKGROUP=AD

RUN apt-get -y update && \
    DEBIAN_FRONTEND=noninteractive apt-get -yqq --no-install-recommends install \
#        resolvconf \
#        dnsutils \
#        vim \
        nano \
#        crudini \
#        dbus \
#        realmd \
        acl \
        krb5-user \
        libpam-krb5 \
        adcli \
        winbind \
        libnss-winbind \
        libpam-winbind \
        samba \
        samba-common-bin \
        samba-dsdb-modules \
        samba-client \
        samba-vfs-modules \
        logrotate \
        attr \
        libpam-mount \
#        policykit-1 \
#        packagekit \
#        sssd \
#        sssd-tools \
#        libnss-sss \
#        libpam-sss \
        supervisor \
        cups && \
    apt-get clean && \
    rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
#    systemctl enable sssd

#RUN chmod 777 /home

COPY *.conf.j2 /root/
COPY entrypoint.sh /entrypoint.sh
COPY supervisord.conf /etc/supervisor/conf.d/supervisord.conf

RUN chmod +x /entrypoint.sh && \
	mkdir -p /etc/cups-persist/ppd && \
	ln -s /etc/cups-persist/printers.conf /etc/cups/printers.conf && \
	rmdir /etc/cups/ppd && \
	ln -s /etc/cups-persist/ppd /etc/cups/ppd && \
	sed -i "s:Listen localhost\:631:Port 631\nServerAlias \*:" /etc/cups/cupsd.conf && \
	sed -E -i "s:(Order allow\,deny):\1\n  Allow all:" /etc/cups/cupsd.conf && \
	useradd guest

VOLUME /etc/samba /var/lib/samba /etc/cups-persist

EXPOSE 135 137 138 139 445 631 9100

ENTRYPOINT ["/entrypoint.sh"]
CMD ["/usr/bin/supervisord","-c","/etc/supervisor/conf.d/supervisord.conf"]