Optimze Dockerfile

Author: ChrSchu90

Dockerfile

@@ -1,25 +1,18 @@
-FROM --platform=$BUILDPLATFORM alpine:3.23 AS build
+FROM --platform=$BUILDPLATFORM alpine:3.23
 ARG BUILDPLATFORM=linux/amd64
 ARG GOST_VERSION=3.1.0
 
-# Install debug tools
-RUN apk add --no-cache curl
-
-# Install dotnet dependencies
-RUN apk add --no-cache icu-libs icu-data-full
-
-# Install WireGuard dependencies + setup
-RUN apk add --no-cache iproute2 iptables ip6tables openresolv wireguard-tools && \
+# Install required tools, dotnet dependencies and wireguard dependencies + fixes
+RUN apk add --no-cache curl \
+    icu-libs icu-data-full \
+    iproute2 iptables ip6tables openresolv wireguard-tools && \
     echo "wireguard" >> /etc/modules && \
-    sed -i 's|\[\[ $proto == -4 \]\] && cmd sysctl -q net\.ipv4\.conf\.all\.src_valid_mark=1|[[ $proto == -4 ]] \&\& [[ $(sysctl -n net.ipv4.conf.all.src_valid_mark) != 1 ]] \&\& cmd sysctl -q net.ipv4.conf.all.src_valid_mark=1|' /usr/bin/wg-quick
-
-# Add GostGen for config file generation
-COPY GostGen/publish/${BUILDPLATFORM} .
-RUN chmod a+x /GostGen
+    sed -i 's|\[\[ $proto == -4 \]\] && cmd sysctl -q net\.ipv4\.conf\.all\.src_valid_mark=1|[[ $proto == -4 ]] \&\& [[ $(sysctl -n net.ipv4.conf.all.src_valid_mark) != 1 ]] \&\& cmd sysctl -q net.ipv4.conf.all.src_valid_mark=1|' /usr/bin/wg-quick && \
+    rm -rf /tmp/* /var/tmp/* /var/cache/distfiles/*
 
-# Download and add ghost (https://github.com/go-gost/gost)
+# Download and add ghost binary (https://github.com/go-gost/gost) for socks5 proxy server
 RUN set -eux; \
-    apk add --no-cache --virtual .fetch-deps tar; \
+    apk add --no-cache --virtual .fetch-deps wget tar; \
     case "${BUILDPLATFORM}" in \
       "linux/amd64") GOST_ARCH="linux_amd64" ;; \
       "linux/arm/v7") GOST_ARCH="linux_armv7" ;; \
@@ -29,26 +22,17 @@ RUN set -eux; \
     esac; \
     wget -qO /tmp/gost.tar.gz "https://github.com/go-gost/gost/releases/download/v${GOST_VERSION}/gost_${GOST_VERSION}_${GOST_ARCH}.tar.gz"; \
     tar -xzf /tmp/gost.tar.gz -C /; \
-    rm -f /tmp/gost.tar.gz; \
+    chmod a+x /gost; \
     apk del .fetch-deps; \
-    chmod a+x /gost;
+    rm -rf /tmp/* /var/tmp/* /var/cache/distfiles/*;
+    
 
-# Cleanup
-RUN rm -rf /root/.cache && mkdir -p /root/.cache && \
-    rm -rf /tmp/* /var/tmp/* /var/cache/apk/* /var/cache/distfiles/*
+# Add project binaries
+COPY --chmod=755 run.sh /run.sh
+COPY --chmod=755 GostGen/publish/${BUILDPLATFORM} .
 
-# Healthcheck
 HEALTHCHECK --interval=15s --timeout=5s --retries=3 --start-period=10s CMD \
   sh -c "curl -fs https://am.i.mullvad.net/json | grep -q '\"mullvad_exit_ip\":true'"
 
-# Add run script
-COPY run.sh /run.sh
-RUN chmod a+x /run.sh
-
-LABEL org.opencontainers.image.source=https://github.com/ChrSchu90/MullvadProxyGateway
-LABEL org.opencontainers.image.description="Turn single a Mullvad WireGuard client into a powerful, reusable proxy gateway. Route traffic from any device through it and connect seamlessly to any Mullvad provided city worldwide."
-LABEL org.opencontainers.image.licenses=MIT
-
 VOLUME ["/data"]
-
-CMD [ "/run.sh" ]
+CMD [ "/run.sh" ]