# =============================================================================
# WireGuard VPS Tunnel — сервер (VPS)
# Multi-arch: linux/amd64, linux/arm64
# =============================================================================
FROM --platform=$BUILDPLATFORM alpine:3.20 AS builder

ARG TARGETPLATFORM
ARG BUILDPLATFORM

RUN echo "Сборка на ${BUILDPLATFORM} для ${TARGETPLATFORM}"

FROM --platform=$TARGETPLATFORM alpine:3.20

ARG TARGETARCH
ARG TARGETVARIANT

RUN apk add --no-cache \
    wireguard-tools \
    iptables \
    ip6tables \
    iproute2 \
    bash \
    curl \
    ca-certificates

COPY entrypoint.sh /entrypoint.sh
COPY healthcheck.sh /healthcheck.sh

RUN chmod +x /entrypoint.sh /healthcheck.sh

EXPOSE 51820/udp

VOLUME ["/etc/wireguard"]

HEALTHCHECK --interval=30s --timeout=10s --retries=3 \
    CMD ["/healthcheck.sh"]

ENTRYPOINT ["/entrypoint.sh"]