# arm32v7 Docker image for YaCy

# build with
# docker build -t yacy/yacy_search_server:armv7 -f Dockerfile.armv7 ../

# run with
# docker run -d --name yacy -p 8090:8090 -p 8443:8443 -v yacy_data:/opt/yacy_search_server/DATA --log-opt max-size=200m --log-opt max-file=2 yacy/yacy_search_server:armv7


# Java 17 is installed from Debian's ARMv7 packages.
FROM arm32v7/debian:bookworm-slim

# Install needed packages not in base image
RUN apt-get update && apt-get install -yq ant curl openjdk-17-jdk-headless && \
  rm -rf /var/lib/apt/lists/*

# set current working dir & copy sources
WORKDIR /opt
COPY . /opt/yacy_search_server/

# .git dir is deleted after the build because it is needed to determine the version,
# but isn't required at runtime
RUN ant compile -f /opt/yacy_search_server/build.xml && \
    rm -rf /opt/yacy_search_server/.git

# Set initial admin password: "yacy" (encoded with custom yacy md5 function net.yacy.cora.order.Digest.encodeMD5Hex())
RUN sed -i "/adminAccountBase64MD5=/c\adminAccountBase64MD5=MD5:8cffbc0d66567a0987a4aba1ec46d63c" /opt/yacy_search_server/defaults/yacy.init && \
	sed -i "/adminAccountForLocalhost=/c\adminAccountForLocalhost=false" /opt/yacy_search_server/defaults/yacy.init && \
	sed -i "/server.https=false/c\server.https=true" /opt/yacy_search_server/defaults/yacy.init && \
	adduser --system --group --no-create-home --disabled-password yacy && \
	chown yacy:yacy -R /opt/yacy_search_server

# Expose HTTP and HTTPS default ports
EXPOSE 8090 8443

# Set data volume: yacy data and configuration will persist even after container stop or destruction
VOLUME ["/opt/yacy_search_server/DATA"]

# Next commands run as yacy as non-root user for improved security
USER yacy

# Start yacy as a foreground process (-f) to display console logs and to wait for yacy process
CMD ["/bin/sh","/opt/yacy_search_server/startYACY.sh","-f"]