# Build stage
FROM golang:1.23-alpine AS builder

WORKDIR /app

RUN apk add --no-cache git

COPY go.mod go.sum ./
RUN go mod download

COPY . .

RUN CGO_ENABLED=0 GOOS=linux go build -ldflags="-s -w" -o /app/mengstack ./cmd/server

# Runtime stage
FROM alpine:3.20

RUN apk add --no-cache ca-certificates tzdata

RUN addgroup -S mengstack && adduser -S mengstack -G mengstack

WORKDIR /app

COPY --from=builder /app/mengstack .
COPY --from=builder /app/configs ./configs

RUN mkdir -p uploads logs && chown -R mengstack:mengstack /app

USER mengstack

EXPOSE 2222

CMD ["./mengstack"]