FROM nginx:1.25-alpine

# Install Certbot (Python-based)
RUN apk add --no-cache certbot python3 py3-pip

# Add entrypoint script to auto-renew certs (optional)
COPY certbot-entrypoint.sh /usr/local/bin/certbot-entrypoint.sh
RUN chmod +x /usr/local/bin/certbot-entrypoint.sh

ENTRYPOINT ["/usr/local/bin/certbot-entrypoint.sh"]
CMD ["nginx", "-g", "daemon off;"]