FROM golang:1.24.4-alpine AS builder

RUN apk add --no-cache git just

WORKDIR /app

COPY go.mod go.sum ./

RUN go mod download

COPY . .

RUN just api
RUN just mirror

FROM alpine:latest

RUN apk --no-cache add ca-certificates tzdata

RUN addgroup -g 1001 appgroup && \
    adduser -D -u 1001 -G appgroup appuser

WORKDIR /app

COPY --from=builder /app/api /app/mirror ./

RUN mkdir -p /app/config && \
    chown -R appuser:appgroup /app

USER appuser

EXPOSE 3000

CMD ["./api"]