copy CA bundle (debian) into image to validate upstream TLS certs
@@ -12,8 +12,12 @@ RUN go generate && \
RUN mkdir /conf
FROM scratch
+# copy ssl certs
+COPY --from=builder /usr/share/ca-certificates/ /usr/share/ca-certificates/
+COPY --from=builder /etc/ssl /etc/ssl
COPY --from=builder /couper /couper
COPY --from=builder /conf /conf
EXPOSE 8080
WORKDIR /conf
+USER 1000:1000
ENTRYPOINT ["/couper"]
