# syntax=docker/dockerfile:1.7
FROM golang:1.26.3-alpine AS builder

WORKDIR /src

# Module proxy is a build-time contract so Docker builds can recover from transient proxy EOFs.
ARG GOPROXY=https://goproxy.cn|https://proxy.golang.org|direct
ARG GOSUMDB=sum.golang.org
ENV GOPROXY=${GOPROXY} GOSUMDB=${GOSUMDB}

COPY api/go.mod api/go.sum ./api/
COPY server/admin/go.mod server/admin/go.sum ./server/admin/
WORKDIR /src/server/admin
RUN --mount=type=cache,id=hyapp-go-mod,target=/go/pkg/mod \
    --mount=type=cache,id=hyapp-go-build,target=/root/.cache/go-build \
    GOWORK=off go mod download

WORKDIR /src
COPY api ./api
COPY server/admin ./server/admin

WORKDIR /src/server/admin
RUN --mount=type=cache,id=hyapp-go-mod,target=/go/pkg/mod \
    --mount=type=cache,id=hyapp-go-build,target=/root/.cache/go-build \
    GOWORK=off CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o /out/server ./cmd/server

FROM alpine:3.20

ENV TZ=UTC

WORKDIR /app

RUN apk add --no-cache ca-certificates wget tzdata && adduser -D -g '' appuser

COPY --from=builder /out/server /app/server
COPY server/admin/configs/config.yaml /app/config.yaml
COPY server/admin/migrations /app/migrations

USER appuser

EXPOSE 13100

ENTRYPOINT ["/app/server"]
CMD ["-config", "/app/config.yaml"]