From e7b7b615b80d785c3a5eb14e5c78e1596df4c4c3 Mon Sep 17 00:00:00 2001
From: AR2000 <ar2000@ar2000.me>
Date: Fri, 10 Jan 2025 17:30:02 +0100
Subject: [PATCH] comments

---
 Dockerfile | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/Dockerfile b/Dockerfile
index 1e54f6a..26e3693 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,6 @@
 ARG IPTABLES_MODE=nft
 
+#install iptables
 FROM ubuntu:noble AS iptables
 RUN --mount=type=cache,target=/var/lib/apt/lists,sharing=locked --mount=type=cache,target=/var/cache/apt,sharing=locked <<EOF
 apt update
@@ -7,20 +8,24 @@ apt upgrade -y
 apt install iptables -y
 EOF
 
+#set alternative to use iptables-legacy
 FROM iptables AS iptables-legacy
 RUN update-alternatives --set iptables /usr/sbin/iptables-legacy
 RUN update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy
 
+#set alternative to use iptables-nft
 FROM iptables AS iptables-nft
 RUN update-alternatives --set iptables /usr/sbin/iptables-nft
 RUN update-alternatives --set ip6tables /usr/sbin/ip6tables-nft
 
+#build crowdsec-custom-bouncer
 FROM golang:1.21.4 AS build-stage
 WORKDIR /app
 RUN git clone --depth 1 https://github.com/crowdsecurity/cs-custom-bouncer.git
 WORKDIR /app/cs-custom-bouncer
 RUN CGO_ENABLED=0 GOOS=linux make release
 
+#build the final image
 FROM iptables-${IPTABLES_MODE} AS crowdsec-custom-bouncer
 ARG IPTABLES_MODE=nft
 RUN mkdir -p /etc/crowdsec/bouncers