FROM debian:trixie-slim AS target
FROM interdiode/id-configurator:latest AS configuration
ARG CONFIG_REPO_PORT
ARG CONFIG_URL_CACERT_CONTENT
COPY --from=target / /src/
RUN id-configurator apply \
    --config-url "https://host.docker.internal:${CONFIG_REPO_PORT}/config.yaml" \
    --config-url-cacert-content "$CONFIG_URL_CACERT_CONTENT" \
    --src /src --dst /dst
FROM target AS runtime
COPY --from=configuration /dst/ /
RUN grep -qx \
    'test-only certificate fetched via --config-url by the id-configurator integration tests' \
    /usr/local/share/ca-certificates/config-url-marker.crt