ARG XTAG
FROM andrejstuden/nix:${XTAG}

ARG USER_ID
ARG GROUP_ID
ARG TOMCAT_DIR

RUN addgroup --gid ${GROUP_ID} labkey
RUN adduser --gecos 'LabKey' --uid ${USER_ID} --gid ${GROUP_ID} --disabled-password labkey 
RUN echo 'labkey ALL=(ALL) NOPASSWD:ALL' >> /etc/sudoers
RUN usermod -G root,sudo labkey

USER labkey

RUN sudo mkdir -p /data/labkey && \
	sudo chown -R labkey:labkey /data/labkey && \
	sudo chown -R labkey:labkey /usr/local/tomcat && \
	mkdir -p /home/labkey/R/site-library 

COPY SSL/CA* /usr/local/tomcat/temp/
RUN for f in /usr/local/tomcat/temp/CA* ; do sudo cp $f /usr/local/share/ca-certificates/ ; done \
	&& sudo update-ca-certificates