FROM php:8.1.11-apache-bullseye

ARG RAINLOOP_VERSION=1.17.0

ARG DEBIAN_FRONTEND=noninteractive
ARG RAINLOOP_URL=https://github.com/RainLoop/rainloop-webmail/releases/download/v${RAINLOOP_VERSION}/rainloop-legacy-${RAINLOOP_VERSION}.zip
ARG RAINLOOP_URL_ASC=https://github.com/RainLoop/rainloop-webmail/releases/download/v${RAINLOOP_VERSION}/rainloop-legacy-${RAINLOOP_VERSION}.zip.asc
ARG RAINLOOP_PGP_PUBLIC_KEY=https://www.rainloop.net/repository/RainLoop.asc 
ARG RAINLOOP_GPG_FINGERPRINT="3B79 7ECE 694F 3B7B 70F3  11A4 ED7C 49D9 87DA 4591"

ENV APACHE_DOCUMENT_ROOT /rainloop

WORKDIR /tmp

SHELL ["/bin/bash", "-o", "pipefail", "-c"]

COPY entrypoint.sh /entrypoint.sh

RUN chmod +x /entrypoint.sh

RUN sed -ri -e "s!/var/www/html!${APACHE_DOCUMENT_ROOT}!g" /etc/apache2/sites-available/*.conf

RUN sed -ri -e "s!/var/www/!${APACHE_DOCUMENT_ROOT}!g" /etc/apache2/apache2.conf /etc/apache2/conf-available/*.conf

RUN apt-get update -qq \
    && apt-get install -q -y --no-install-recommends unzip=6.0-26+deb11u1 wget=1.21-1+deb11u1 gpg=2.2.27-2+deb11u2 gpg-agent=2.2.27-2+deb11u2 \
    && apt-get clean \
    && rm -rf /var/lib/apt/lists/* \
    &&  wget -q ${RAINLOOP_PGP_PUBLIC_KEY} \
    && wget -q ${RAINLOOP_URL_ASC} \
    && wget -q ${RAINLOOP_URL} \
    && gpg --import RainLoop.asc \
    && FINGERPRINT="$(LANG=C gpg --verify rainloop-legacy-${RAINLOOP_VERSION}.zip.asc rainloop-legacy-${RAINLOOP_VERSION}.zip 2>&1 \
      | sed -n "s#Primary key fingerprint: \(.*\)#\1#p")" \
    && if [ -z "${FINGERPRINT}" ]; then echo "ERROR: Invalid GPG signature!" && exit 1; fi \
    && if [ "${FINGERPRINT}" != "${RAINLOOP_GPG_FINGERPRINT}" ]; then echo "ERROR: Wrong GPG fingerprint!" && exit 1; fi \
    &&  mkdir ${APACHE_DOCUMENT_ROOT} \
    && unzip -q /tmp/rainloop-legacy-${RAINLOOP_VERSION}.zip -d ${APACHE_DOCUMENT_ROOT} \
    && apt-get purge -q -y unzip wget gpg gpg-agent \
    && apt-get autoremove -y \
    && rm -rf /tmp/*

EXPOSE 80

VOLUME ["/rainloop/data"]

WORKDIR /rainloop/data

ENTRYPOINT ["/entrypoint.sh"]