FROM debian:trixie-slim

RUN apt-get update && \
    apt-get install -y --no-install-recommends \
            pgpool2 \
            postgresql-client \
            iproute2 \
            && \
    rm -rf /var/lib/apt/lists/*

RUN apt-get update && \
    apt-get install -y --no-install-recommends \
            openssh-server \
            sudo \
            && \
    rm -rf /var/lib/apt/lists/* && \
    echo "postgres   ALL = (ALL) NOPASSWD:ALL" >> /etc/sudoers && \
    echo "X11Forwarding no" >> /etc/ssh/sshd_config && \
    echo "PasswordAuthentication no" >> /etc/ssh/sshd_config && \
    echo "StrictHostKeyChecking no" >> /etc/ssh/ssh_config && \
    mkdir -p /var/lib/postgresql/.ssh && \
    chmod 700 /var/lib/postgresql/.ssh && \
    chown postgres: /var/lib/postgresql/.ssh && \
    chmod g-w,o-w /var/lib/postgresql

COPY --chmod=600 --chown=postgres:postgres authorized_keys id_ed25519 /var/lib/postgresql/.ssh/
# COPY --chmod=600 --chown=postgres:postgres pgpool.conf pool_hba.conf pool_passwd /etc/pgpool2/
COPY --chmod=600 --chown=postgres:postgres pgpool.conf /etc/pgpool2/
COPY --chmod=755 entrypoint.sh /usr/local/bin/

ENTRYPOINT ["entrypoint.sh"]