FROM docker.io/debian:12-slim as base
ENV DEBIAN_FRONTEND=noninteractive
WORKDIR /app/

FROM base as build
RUN apt-get update                                \
    && apt-get install -y --no-install-recommends \
        bzip2                                     \
        ca-certificates                           \
        curl                                      \
    && rm -rf /var/lib/apt/lists/*
ARG MONERO='https://downloads.getmonero.org/cli/linux64'
RUN curl -L "$MONERO" | tar xj --strip-components=1

FROM base
COPY --from=build /app/ .
RUN useradd -m app
RUN mkdir -p            /home/app/.bitmonero/ /wallet/ \
    && chown -R app:app /home/app/            /wallet/
VOLUME /home/app/.bitmonero/ /wallet/
EXPOSE 18080 18081
USER app
CMD ["./monerod", "--non-interactive", "--confirm-external-bind",        \
    "--p2p-bind-ip=0.0.0.0", "--p2p-bind-port=18080",                    \
    "--rpc-bind-ip=0.0.0.0", "--rpc-bind-port=18081", "--restricted-rpc" \
]