#!/bin/bash
set -e

# Mirror-Domain: per Env überschreibbar, Fallback auf as47526
MIRROR="${MIRROR_HOST:-mirror.as47526.net}"

apt-get update -qq
apt-get install -y ca-certificates curl gnupg

install -m 0755 -d /etc/apt/keyrings
# GPG-Key immer vom Original holen (Integrität!)
curl -fsSL "https://download.docker.com/linux/debian/gpg" \
    -o /etc/apt/keyrings/docker.asc
chmod a+r /etc/apt/keyrings/docker.asc

echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] \
https://$MIRROR/docker/linux/debian \
$(. /etc/os-release && echo "$VERSION_CODENAME") stable" \
> /etc/apt/sources.list.d/docker.list

apt-get update
apt-get install -y docker-ce docker-ce-cli containerd.io \
    docker-buildx-plugin docker-compose-plugin

echo "Docker installiert via $MIRROR"
