Add EAP support

[AndreaCuneo]

Extend the base image to support EAP-TTLS/PAP using external volumes for certificates.

[STommydx]

Here's what I do to extend the docker image to support EAP-TTLS/PAP for my company. I use this Dockerfile to install the freeradius eap module and generate certificates (you may mount certificates with volumes alternatively).

FROM ghcr.io/arklab/freeradius-azuread:latest
RUN apk add openssl make freeradius-eap
RUN cd /etc/raddb/certs && make

Then I re-enable the eap module in authorize section of inner-tunnel.

-eap {

Remove - in line 131.

[AndreaCuneo]

Thanks for sharing, that's indeed how you can build a custom image to support this scenario.

I'd like to extend this image to optionally enforce the EAP-TTLS using an ENV variable.
When ENFORCE_EAPTTLS=1 mangle the configuration to enforce taking certs from an external volume.

Would you find an use in that?