# syntax=docker/dockerfile:1
FROM golang:1.23-alpine AS builder

WORKDIR /src

# Fetch dependencies before copying source for better layer caching
COPY go.mod go.sum ./
RUN go mod download

COPY . .

RUN CGO_ENABLED=0 GOOS=linux go build \
    -ldflags="-s -w" \
    -o /reolink-controller \
    ./cmd/server

# ── Runtime ───────────────────────────────────────────────────────────────────
FROM alpine:3.20

RUN apk add --no-cache ca-certificates tzdata

RUN addgroup -S app && adduser -S app -G app

WORKDIR /app
COPY --from=builder /reolink-controller /app/reolink-controller

# Data directory for SQLite
RUN mkdir -p /data && chown app:app /data

USER app

EXPOSE 8080

ENTRYPOINT ["/app/reolink-controller"]
