docker-onion-service/Dockerfile

FROM alpine:3.11

ARG TOR_PACKAGE_VERSION=0.4.1.7-r0
ARG NETCAT_PACKAGE_VERSION=1.130-r1
RUN apk add --no-cache \
        netcat-openbsd=${NETCAT_PACKAGE_VERSION} \
        tor=${TOR_PACKAGE_VERSION} \
    && adduser -S onion \
    && mkdir -m u=rwx,g=,o= /onion-service \
    && chown onion /onion-service
VOLUME /onion-service

COPY torrc.template /
RUN chmod a+r /torrc.template

ENV VERSION 3
ENV VIRTUAL_PORT 80
ENV TARGET 1.2.3.4:8080

COPY entrypoint.sh /
RUN chmod a+rx /entrypoint.sh
ENTRYPOINT ["/entrypoint.sh"]

USER onion

CMD ["tor", "-f", "/tmp/torrc"]

HEALTHCHECK CMD \
    nc -x localhost:9050 -z "$(cat /onion-service/hostname)" "$VIRTUAL_PORT" \
    || exit 1