FROM debian:bookworm-slim

# libpam-radius-auth: PAM -> RADIUS bridge to the Duo Auth Proxy on 127.0.0.1
RUN apt-get update \
 && apt-get install -y --no-install-recommends \
      openvpn libpam-radius-auth iproute2 procps ca-certificates \
 && rm -rf /var/lib/apt/lists/*

COPY pam-openvpn /etc/pam.d/openvpn
COPY entrypoint.sh /entrypoint.sh
RUN chmod +x /entrypoint.sh

ENTRYPOINT ["/entrypoint.sh"]