FROM registry.access.redhat.com/ubi9/ubi:latest

RUN dnf install -y https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm \
 && dnf install -y openvpn easy-rsa iproute iptables \
 && dnf clean all \
 && rm -rf /var/cache/dnf

COPY scripts/start.sh /usr/local/bin/openvpn-start
COPY scripts/init-pki.sh /usr/local/bin/openvpn-init-pki
COPY scripts/create-client.sh /usr/local/bin/openvpn-create-client
COPY scripts/revoke-client.sh /usr/local/bin/openvpn-revoke-client

RUN chmod 0755 \
      /usr/local/bin/openvpn-start \
      /usr/local/bin/openvpn-init-pki \
      /usr/local/bin/openvpn-create-client \
      /usr/local/bin/openvpn-revoke-client

RUN mkdir -p /openvpn/pki /openvpn/state /etc/openvpn

STOPSIGNAL SIGTERM

CMD ["openvpn", "--config", "/config/server.conf"]