it builds and it runs, needs further testing

Dockerfile

@@ -8,7 +8,7 @@ RUN apt-get update && \
       clang \
       llvm \
       libclang-dev \
-      libssl-dev \ 
+      libssl-dev \
       pkg-config \
       ca-certificates \
     && rm -rf /var/lib/apt/lists/*
@@ -32,9 +32,23 @@ FROM debian:bookworm-slim
 RUN apt-get update && \
     apt-get install -y --no-install-recommends \
       ca-certificates \
+      gosu \
     && rm -rf /var/lib/apt/lists/*
 
-# Copy the compiled binary
-COPY --from=builder /src/freenet/target/release/freenet /usr/local/bin/freenet
+# Create default non-root user
+RUN useradd -m -u 1000 -s /bin/bash freenetuser && \
+    mkdir -p /data && \
+    chown freenetuser:freenetuser /data
 
-CMD ["freenet", "-b", "0.0.0.0"]
+# Copy binary and entrypoint
+COPY --from=builder /src/freenet/target/release/freenet /usr/local/bin/
+COPY entrypoint.sh /entrypoint.sh
+RUN chmod +x /entrypoint.sh
+
+# Environment variables
+ENV DATA_DIR="/data/data" \
+    CONFIG_DIR="/data/config"
+
+VOLUME ["/data"]
+ENTRYPOINT ["/entrypoint.sh"]
+CMD ["freenet"]