FROM golang:1.26.1-bookworm AS builder

WORKDIR /src

COPY go.mod go.sum ./
RUN go mod download

COPY . .

RUN CGO_ENABLED=0 GOOS=linux go build -trimpath -ldflags="-s -w" -o /out/amcs-server ./cmd/amcs-server

FROM debian:bookworm-slim

RUN apt-get update \
    && apt-get install -y --no-install-recommends ca-certificates \
    && rm -rf /var/lib/apt/lists/* \
    && useradd --system --create-home --uid 10001 appuser

WORKDIR /app

COPY --from=builder /out/amcs-server /app/amcs-server
COPY --chown=appuser:appuser configs /app/configs

USER appuser

EXPOSE 8080

ENV AMCS_CONFIG=/app/configs/docker.yaml

ENTRYPOINT ["/app/amcs-server"]