FROM alpine:latest LABEL maintainer="AdGuard Team " # Update CA certs RUN apk --no-cache --update add ca-certificates libcap && \ rm -rf /var/cache/apk/* && \ mkdir -p /opt/adguardhome/conf /opt/adguardhome/work && \ chown -R nobody: /opt/adguardhome COPY --chown=nobody: ./AdGuardHome /opt/adguardhome/AdGuardHome RUN setcap 'cap_net_bind_service=+eip' /opt/adguardhome/AdGuardHome EXPOSE 53/tcp 53/udp 67/tcp 67/udp 68/tcp 68/udp 80/tcp 443/tcp 853/tcp 853/udp 3000/tcp VOLUME ["/opt/adguardhome/conf", "/opt/adguardhome/work"] WORKDIR /opt/adguardhome/work #USER nobody ENTRYPOINT ["/opt/adguardhome/AdGuardHome"] CMD ["-h", "0.0.0.0", "-c", "/opt/adguardhome/conf/AdGuardHome.yaml", "-w", "/opt/adguardhome/work"]