# Use a minimal, secure base image
FROM alpine:latest

# Install only the tools we need: SOPS and GnuPG
RUN apk add --no-cache sops gnupg

# Set a working directory
WORKDIR /app

# Copy our decryption script into the container and make it executable
COPY entrypoint.sh .
RUN chmod +x ./entrypoint.sh

# Set the script as the entrypoint
ENTRYPOINT ["./entrypoint.sh"]