FROM alpine:edge

RUN apk add --no-cache curl tor bash iptables && \
	(echo -e "\
SocksPort 0.0.0.0:9050\n\
HiddenServiceDir /var/lib/tor/hidden_service/\n\
HiddenServicePort 80 nginx:80\n\
VirtualAddrNetworkIPv4 10.111.0.0/16\n\
AutomapHostsOnResolve 1\n\
TransPort 0.0.0.0:9040\n\
DNSPort 0.0.0.0:5353\n\
"; cat /etc/tor/torrc.sample) >/etc/tor/torrc && \
	echo "DONE"

HEALTHCHECK --interval=60s --timeout=15s --start-period=20s \
    CMD curl -s --socks5 127.0.0.1:9050 'https://check.torproject.org/' | grep -qm1 Congratulations

COPY /fs-root/ /
RUN chmod 755 /sf-tor.sh

CMD ["/sf-tor.sh"]