cleanup

Dockerfile

@@ -1,20 +1,7 @@
-# syntax=docker/dockerfile:1
-FROM docker.io/library/alpine:3.24.2
-
+FROM docker.io/library/alpine:3
 RUN apk add --no-cache openssh-client tini
-
 COPY --chmod=0755 entrypoint.sh /usr/local/bin/sish-client
-
-# nobody; HOME and state live in /tmp so the root filesystem can be read-only
-ENV HOME=/tmp \
-    STATE_DIR=/tmp/sish-client
+# nobody: ssh needs a uid that exists in /etc/passwd, so keep runAsUser at 65534
 USER 65534:65534
-
-# -g: forward signals to the whole process group, so ssh stops cleanly too
+# tini reaps zombies and forwards SIGTERM to the whole process group (-g), incl. ssh
 ENTRYPOINT ["/sbin/tini", "-g", "--", "/usr/local/bin/sish-client"]
-
-HEALTHCHECK --interval=15s --timeout=3s --start-period=30s --retries=2 \
-  CMD ["/bin/sh", "-c", "test -f \"$STATE_DIR/ready\""]
-
-LABEL org.opencontainers.image.title="sish-client" \
-      org.opencontainers.image.description="Environment-driven sish connector (SSH reverse tunnels with SNI passthrough)"