FROM debian:latest

RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y squid-openssl

RUN openssl req -new -newkey rsa:2048 -nodes -x509 -sha256 \
   -extensions v3_ca -days 365 \
   -keyout /etc/ssl/private/squid-ca.key \
   -out /etc/ssl/certs/squid-ca.pem \
   -subj "/CN=localhost" \
   -addext "subjectAltName=DNS:localhost"

COPY ./squid.conf /etc/squid/conf.d/synit-squid.conf

RUN mkdir -p /var/spool/squid

CMD \
    chmod -R 0777 /var/spool/squid && \
    ([ -d /var/spool/squid/ssl_db ] || \
       /usr/lib/squid/security_file_certgen -c -s /var/spool/squid/ssl_db -M 4MB) && \
    /etc/init.d/squid start && \
    tail -F /var/log/squid/access.log

# other potentially interesting log files: /var/log/squid/cache.log /var/log/squid/store.log

EXPOSE 3127 3128