FROM alpine:edge
LABEL maintainer="Mike Crute <mike@crute.us>"

RUN set -euxo pipefail; \
    apk add --no-cache \
        strongswan \
    ; \
    rm /etc/ipsec.conf; \
    echo ": RSA vpn.pem" > /etc/ipsec.secrets

ADD crute-root.pem /etc/ipsec.d/cacerts/
ADD vpn-g1.pem /etc/ipsec.d/cacerts/
ADD entrypoint.sh /

ENTRYPOINT [ "/entrypoint.sh" ]
CMD [ "/usr/sbin/ipsec", "start", "--nofork" ]