Dockerfile

# Build stage
FROM golang:1.24-alpine AS builder

# Set working directory
WORKDIR /app

# Copy go mod files
COPY go.mod go.sum ./

# Download dependencies
RUN go mod download

# Copy source code
COPY . .

# Build the application (CGO disabled - using pure Go SQLite)
RUN CGO_ENABLED=0 GOOS=linux go build -a -ldflags '-s -w' -o minipaas ./cmd/server

# Runtime stage
FROM alpine:3.19

# Install ca-certificates for HTTPS calls
RUN apk --no-cache add ca-certificates

# Create non-root user
RUN addgroup -g 1000 minipaas && \
    adduser -u 1000 -G minipaas -s /bin/sh -D minipaas

WORKDIR /app

# Copy binary from builder
COPY --from=builder /app/minipaas .

# Change ownership
RUN chown -R minipaas:minipaas /app

# Switch to non-root user
USER minipaas

# Expose port
EXPOSE 8080

# Health check
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
    CMD wget --no-verbose --tries=1 --spider http://localhost:8080/healthz || exit 1

# Run the application
ENTRYPOINT ["./minipaas"]