(socks-proxy) add healthcheck to dockerfile

Author: zeylos

src/socks-proxy/Dockerfile

@@ -6,7 +6,7 @@ ARG DANTE_SHA256=1973c7732f1f9f0a4c0ccf2c1ce462c7c25060b25643ea90f9b98f53a813fae
 
 RUN <<EOR
 apt-get update
-apt-get install -y build-essential curl
+DEBIAN_FRONTEND="noninteractive" apt-get install -y build-essential curl
 EOR
 
 RUN <<EOR
@@ -22,9 +22,16 @@ EOR
 
 FROM debian:trixie-slim AS runtime
 
-COPY --from=base /usr/local/sbin/sockd /usr/local/sbin/sockd
+RUN <<EOR
+apt-get update
+DEBIAN_FRONTEND="noninteractive" apt-get install -y curl
+rm -rf /var/lib/apt/lists/*
+EOR
 
+COPY --from=base /usr/local/sbin/sockd /usr/local/sbin/sockd
 COPY --chmod=0755 entrypoint.sh /entrypoint.sh
 
 ENTRYPOINT ["/entrypoint.sh"]
+HEALTHCHECK --interval=1m --timeout=3s --start-interval=5s \
+  CMD curl -fsSx socks5h://$(cat /healthcreds)@localhost:${PROXY_INTERNAL_PORT} https://ip.me
 CMD ["/usr/local/sbin/sockd"]

src/socks-proxy/entrypoint.sh

@@ -1,11 +1,16 @@
 #!/usr/bin/env bash
 set -euo pipefail
+umask 0077
 
 if [ -z "${PROXY_USERS:-}" ]; then
   echo "Error: PROXY_USERS env var is not set (format: user1:pass1,user2:pass2)"
   exit 1
 fi
 
+useradd -M -s /usr/sbin/nologin "healthcheck"
+HEALTHCHECK_PASSWORD=$(head /dev/urandom | tr -dc A-Za-z0-9 | head -c 32)
+echo "healthcheck:${HEALTHCHECK_PASSWORD}" | tee /healthcreds | chpasswd
+
 # Create unix users for each entry of PROXY_USERS
 IFS=',' read -ra USERS <<< "$PROXY_USERS"
 for entry in "${USERS[@]}"; do
@@ -59,6 +64,5 @@ done
 
 # Replace the placeholder with the generated configuration
 echo "$DANTE_CONFIG" > /etc/sockd.conf
-chmod 0600 /etc/sockd.conf
 
 exec "$@"