# A docker file for scripts/make/build-docker.sh. FROM alpine:3.13 ARG BUILD_DATE ARG VERSION ARG VCS_REF LABEL\ maintainer="AdGuard Team " \ org.opencontainers.image.authors="AdGuard Team " \ org.opencontainers.image.created=$BUILD_DATE \ org.opencontainers.image.description="Network-wide ads & trackers blocking DNS server" \ org.opencontainers.image.documentation="https://github.com/AdguardTeam/AdGuardHome/wiki/" \ org.opencontainers.image.licenses="GPL-3.0" \ org.opencontainers.image.revision=$VCS_REF \ org.opencontainers.image.source="https://github.com/AdguardTeam/AdGuardHome" \ org.opencontainers.image.title="AdGuard Home" \ org.opencontainers.image.url="https://adguard.com/en/adguard-home/overview.html" \ org.opencontainers.image.vendor="AdGuard" \ org.opencontainers.image.version=$VERSION # Update certificates. RUN apk --no-cache --update add ca-certificates libcap tzdata && \ rm -rf /var/cache/apk/* && \ mkdir -p /opt/adguardhome/conf /opt/adguardhome/work && \ chown -R nobody: /opt/adguardhome ARG DIST_DIR ARG TARGETARCH ARG TARGETOS ARG TARGETVARIANT COPY --chown=nobody:nogroup\ ./${DIST_DIR}/docker/AdGuardHome_${TARGETOS}_${TARGETARCH}_${TARGETVARIANT}\ /opt/adguardhome/AdGuardHome RUN setcap 'cap_net_bind_service=+eip' /opt/adguardhome/AdGuardHome # 53 : TCP, UDP : DNS # 67 : UDP : DHCP (server) # 68 : UDP : DHCP (client) # 80 : TCP : HTTP (main) # 443 : TCP, UDP : HTTPS, DNS-over-HTTPS (incl. HTTP/3), DNSCrypt (main) # 784 : UDP : DNS-over-QUIC (experimental) # 853 : TCP, UDP : DNS-over-TLS, DNS-over-QUIC # 3000 : TCP, UDP : HTTP(S) (alt, incl. HTTP/3) # 3001 : TCP, UDP : HTTP(S) (beta, incl. HTTP/3) # 5443 : TCP, UDP : DNSCrypt (alt) # 6060 : TCP : HTTP (pprof) # 8853 : UDP : DNS-over-QUIC (experimental) EXPOSE 53/tcp 53/udp 67/udp 68/udp 80/tcp 443/tcp 443/udp 784/udp\ 853/tcp 853/udp 3000/tcp 3000/udp 3001/tcp 3001/udp 5443/tcp\ 5443/udp 6060/tcp 8853/udp WORKDIR /opt/adguardhome/work ENTRYPOINT ["/opt/adguardhome/AdGuardHome"] CMD [ \ "--no-check-update", \ "-c", "/opt/adguardhome/conf/AdGuardHome.yaml", \ "-h", "0.0.0.0", \ "-w", "/opt/adguardhome/work" \ ]