# Builder stage FROM golang:1.24-trixie AS builder WORKDIR /app # Copy go mod and sum files COPY go.mod go.sum ./ # Download dependencies RUN go mod download # Copy source code COPY . . # Build the application # CGO_ENABLED=0 for static binary since we are using pure Go SQLite driver (glebarez/sqlite) RUN CGO_ENABLED=0 go build -o server ./cmd/server/main.go # Runtime stage FROM debian:trixie-slim # Install runtime dependencies RUN apt-get update && apt-get install -y --no-install-recommends \ ca-certificates \ tzdata \ curl \ && rm -rf /var/lib/apt/lists/* # Create non-root user RUN useradd -r -u 1000 -s /bin/false appuser WORKDIR /app # Copy binary from builder COPY --from=builder /app/server . # Copy web assets (templates, static files) COPY --from=builder /app/web ./web # Create data directory for SQLite RUN mkdir -p /app/data && chown -R appuser:appuser /app # Switch to non-root user USER appuser # Expose port EXPOSE 8080 # Volume for persistent data VOLUME ["/app/data"] # Health check HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \ CMD curl -f http://localhost:8080/ || exit 1 # Run the application ENTRYPOINT ["./server"]