# syntax=docker/dockerfile:1.7
FROM golang:1.26.6-alpine AS build
WORKDIR /src
COPY go.mod ./
RUN go mod download
RUN mkdir /out
COPY . .
RUN CGO_ENABLED=0 GOOS=linux go build -trimpath -ldflags="-s -w" -o /out/pocketwatch ./cmd/pocketwatch

FROM alpine:3.24
RUN addgroup -S -g 10001 pocketwatch && adduser -S -D -H -u 10001 -G pocketwatch pocketwatch \
    && mkdir -p /data && chown -R pocketwatch:pocketwatch /data
COPY --from=build /out/pocketwatch /usr/local/bin/pocketwatch
USER pocketwatch
VOLUME ["/data"]
EXPOSE 8080
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 CMD wget -q -O - http://127.0.0.1:8080/healthz | grep -q '"status":"ok"' || exit 1
ENV APP_ADDR=:8080 DATA_DIR=/data COOKIE_SECURE=false
ENTRYPOINT ["/usr/local/bin/pocketwatch"]