FROM golang:1.27-alpine AS build
WORKDIR /src
COPY go.mod go.sum ./
RUN go mod download
COPY . .
RUN CGO_ENABLED=0 go build -trimpath -ldflags='-s -w' -o /gitpocket .

FROM alpine:3.22
RUN apk add --no-cache git gnupg openssh-keygen ca-certificates
COPY --from=build /gitpocket /usr/local/bin/gitpocket
ENV HOME=/tmp GOMEMLIMIT=192MiB
USER 65532:65532
EXPOSE 3200
ENTRYPOINT ["/usr/local/bin/gitpocket", "-root", "/srv/gitpocket"]
CMD ["serve", "-listen", ":3200"]