FROM alpine
WORKDIR /etc/unbound
RUN apk add --no-cache --update unbound ca-certificates
COPY certs/ /usr/local/share/ca-certificates/
RUN update-ca-certificates
ADD unbound.conf /etc/unbound/unbound.conf
ENTRYPOINT ["unbound", "-c", "/etc/unbound/unbound.conf"]
EXPOSE 5353/udp 5353/tcp