fix(docker): update to current Dockerfile formatting standards (#16)

Reviewed-on: #16

.gitea/workflows/ci.yml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out repository code
-        uses: actions/checkout@v6.0.1
+        uses: actions/checkout@v6.0.2
         with:
           fetch-depth: 0
 
@@ -42,10 +42,10 @@ jobs:
       #     # command: snyk
       #     args: snyk code test --all-projects --exclude=.archive
 
-      - name: Snyk Vulnerability Scan
-        uses: snyk/actions/python@master
-        continue-on-error: true # Sometimes vulns aren't immediately fixable
-        env:
-          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
-        with:
-          args: test --all-projects
+      # - name: Snyk Vulnerability Scan
+      #   uses: snyk/actions/python@master
+      #   continue-on-error: true # Sometimes vulns aren't immediately fixable
+      #   env:
+      #     SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+      #   with:
+      #     args: test --all-projects

.gitea/workflows/release.yml

@@ -45,7 +45,7 @@ jobs:
           REPO: ${{ gitea.repository }}
 
       - name: Check out repository
-        uses: actions/checkout@v6.0.1
+        uses: actions/checkout@v6.0.2
         with:
           fetch-depth: 0
           ref: ${{ needs.tag.outputs.tag_name }}

Dockerfile

@@ -1,20 +1,22 @@
-FROM alpine:3.23.2 as build
+FROM alpine:3.23.3 AS webproc
+SHELL ["/bin/ash", "-o", "pipefail", "-c"]
+ENV WEBPROCVERSION=0.4.0
+ENV WEBPROCURL=https://github.com/jpillora/webproc/releases/download/v$WEBPROCVERSION/webproc_"$WEBPROCVERSION"_linux_amd64.gz
+RUN apk add --no-cache curl=8.17.0-r1 && \
+    curl -sL $WEBPROCURL | gzip -d - > /usr/local/bin/webproc && \
+    chmod +x /usr/local/bin/webproc
+
+FROM alpine:3.23.3
 LABEL maintainer="Luke Tainton <luke@tainton.uk>"
 LABEL org.opencontainers.image.source="https://git.tainton.uk/repos/docker-radius"
-
-FROM build as webproc
-ENV WEBPROCVERSION 0.4.0
-ENV WEBPROCURL https://github.com/jpillora/webproc/releases/download/v$WEBPROCVERSION/webproc_"$WEBPROCVERSION"_linux_amd64.gz
-RUN apk add --no-cache curl
-RUN curl -sL $WEBPROCURL | gzip -d - > /usr/local/bin/webproc
-RUN chmod +x /usr/local/bin/webproc
-
-FROM build as radius
-RUN apk --no-cache add freeradius
+LABEL org.opencontainers.image.description="FreeRADIUS server with web administration interface"
+LABEL org.opencontainers.image.title="docker-radius"
+SHELL ["/bin/ash", "-o", "pipefail", "-c"]
+RUN apk --no-cache add freeradius=3.0.27-r2
 COPY --from=webproc /usr/local/bin/webproc /usr/local/bin/webproc
-ADD clients.conf /etc/raddb/clients.conf
-ADD users /etc/raddb/users
-ADD radiusd.conf /etc/raddb/radiusd.conf
+COPY clients.conf /etc/raddb/clients.conf
+COPY users /etc/raddb/users
+COPY radiusd.conf /etc/raddb/radiusd.conf
 RUN chmod -R o-w /etc/raddb/
 ENTRYPOINT ["webproc","-o","restart","-c","/etc/raddb/users","-c", "/etc/raddb/clients.conf", "-c", "/etc/raddb/radiusd.conf","--","radiusd","-f","-l","stdout"]
 EXPOSE 1812/udp 1813/udp 8080/tcp

renovate.json

@@ -0,0 +1,35 @@
+{
+  "assignAutomerge": false,
+  "assigneesFromCodeOwners": false,
+  "dependencyDashboardAutoclose": true,
+  "extends": ["config:recommended", "docker:enableMajor"],
+  "ignorePaths": ["**/.archive/**"],
+  "labels": ["type/dependencies"],
+  "platformCommit": "enabled",
+  "rebaseWhen": "behind-base-branch",
+  "rollbackPrs": true,
+  "semanticCommits": "enabled",
+  "semanticCommitScope": "deps",
+  "semanticCommitType": "feat",
+  "osvVulnerabilityAlerts": true,
+  "dependencyDashboardOSVVulnerabilitySummary": "all",
+  "vulnerabilityAlerts": {
+    "commitMessagePrefix": "[SECURITY] ",
+    "enabled": true,
+    "labels": ["security"],
+    "prCreation": "immediate"
+  },
+  "lockFileMaintenance": {
+    "enabled": true
+  },
+  "packageRules": [
+    {
+      "matchDepTypes": ["devDependencies"],
+      "automerge": true
+    },
+    {
+      "matchUpdateTypes": ["patch"],
+      "automerge": true
+    }
+  ]
+}