ARG from=debian:bookworm
FROM ${from}
ARG DEBIAN_FRONTEND=noninteractive

#
#  We need also curl to get the signing key
#
RUN apt-get update \
 && apt-get install -y curl

#
#  Set up NetworkRADIUS extras repository
#
RUN install -d -o root -g root -m 0755 /etc/apt/keyrings \
 && curl -o /etc/apt/keyrings/packages.networkradius.com.asc "https://packages.inkbridgenetworks.com/pgp/packages%40networkradius.com" \
 && echo "deb [signed-by=/etc/apt/keyrings/packages.networkradius.com.asc] http://packages.networkradius.com/extras/debian/bookworm bookworm main" > /etc/apt/sources.list.d/networkradius-extras.list

#
#  Install from reposittory
#
RUN apt-get install -y freeradius freeradius-ldap \
 && apt-get clean \
 && rm -r /var/lib/apt/lists/* \
 && ln -s /etc/freeradius /etc/raddb

COPY --chown=freerad:freerad ./raddb* /etc/raddb/3.0/

#Disable EAP
RUN rm -f /etc/raddb/3.0/mods-enabled/eap & \
    rm -f /etc/raddb/3.0/sites-enabled/inner-tunnel

WORKDIR /

USER freerad:freerad

EXPOSE 1812/udp 1813/udp
ENTRYPOINT ["freeradius"]
CMD ["-X"]