FROM golang:1.24 AS build
WORKDIR /app

COPY go.mod go.sum ./
RUN go mod download

COPY . .
RUN CGO_ENABLED=0 GOOS=linux go build -o /cish-api

FROM gcr.io/distroless/base-debian11
WORKDIR /app
EXPOSE 5677
USER nonroot:nonroot

COPY --from=build /cish-api /app/cish-api

CMD ["/app/cish-api"]

