jbergner
e86bd571ee
All checks were successful
release-tag / release-image (push) Successful in 1m27s
25 lines
779 B
Docker
25 lines
779 B
Docker
# ---------- Build stage ----------
|
|
FROM golang:1.24-alpine AS build
|
|
WORKDIR /src
|
|
# optional, aber nett für reproduzierbare Builds:
|
|
ENV CGO_ENABLED=0
|
|
# Falls du private CAs brauchst, sonst weglassen:
|
|
RUN apk add --no-cache ca-certificates
|
|
COPY go.* ./
|
|
RUN go mod download
|
|
COPY . .
|
|
RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o /out/mirrorweb
|
|
|
|
# ---------- Runtime stage ----------
|
|
FROM alpine:3.22
|
|
# Für TLS (falls du Traefik mal nicht davor hast) und saubere Zeit:
|
|
RUN apk add --no-cache ca-certificates tzdata && update-ca-certificates
|
|
# Non-root User
|
|
RUN addgroup -S app && adduser -S -G app app
|
|
USER app
|
|
WORKDIR /
|
|
VOLUME ["/data"] # hier hängt dein Mirror-Volume read-only
|
|
EXPOSE 8080
|
|
COPY --from=build /out/mirrorweb /mirrorweb
|
|
ENTRYPOINT ["/mirrorweb"]
|