FROM nats:2.10-alpine
# Render nats-server.conf.template before building:
# source /etc/nats/operator.env
# envsubst < nats-server.conf.template > nats-server.conf-rendered
# docker build --build-arg CONF=nats-server.conf-rendered -t fossil-nats:2.10 .
ARG CONF=nats-server.conf-rendered
COPY ${CONF} /etc/nats/nats-server.conf
# TLS certs and creds are mounted at runtime — never baked into the image:
# docker run -v /var/nats/tls:/var/nats/tls:ro \
# -v /var/nats/jwt:/var/nats/jwt \
# -v /var/nats/jetstream:/var/nats/jetstream \
# -p 4222:4222 fossil-nats:2.10
CMD ["nats-server", "-c", "/etc/nats/nats-server.conf"]