FROM golang:1.24-alpine AS builder

RUN apk add --no-cache git

WORKDIR /src
COPY go.mod go.sum ./
RUN go mod download
COPY . .
RUN CGO_ENABLED=0 GOOS=linux go build -ldflags="-s -w" -o /upload-service .

FROM alpine:3.21

RUN apk add --no-cache ca-certificates curl jq

COPY --from=builder /upload-service /usr/local/bin/upload-service
COPY entrypoint.sh /entrypoint.sh
RUN chmod +x /entrypoint.sh

RUN mkdir -p /data && chown 65534:65534 /data

USER 65534:65534

EXPOSE 8080

ENTRYPOINT ["/entrypoint.sh"]
CMD ["upload-service"]