FROM golang:1.25-alpine AS builder
WORKDIR /src
COPY go.mod go.sum ./
RUN go mod download
COPY . .
RUN CGO_ENABLED=0 go build -trimpath -ldflags="-s -w" -o /eng-pad-server ./cmd/eng-pad-server

FROM alpine:3.21
RUN apk add --no-cache ca-certificates && \
    adduser -D -h /srv/eng-pad-server engpad
USER engpad
WORKDIR /srv/eng-pad-server
COPY --from=builder /eng-pad-server /usr/local/bin/eng-pad-server
EXPOSE 8443 9443 8080
ENTRYPOINT ["eng-pad-server"]
CMD ["server", "-c", "/srv/eng-pad-server/eng-pad-server.toml"]