FROM golang:1.27@sha256:c5b07c17f54c5f22230c4b4da6e90249165cf55368e01a52808cb92064e18836 AS build

WORKDIR /build
ENV CGO_ENABLED=0
ENV GOEXPERIMENT=jsonv2

COPY go.mod go.sum ./
RUN go mod download

COPY . .
RUN go build -ldflags="-s -w" -o /release/service ./cmd/service

FROM gcr.io/distroless/static-debian12@sha256:d75cdd72874d4790092fcb1b058493ecf6bb5bf2b2b897045b00ff01d91843f2

ENV TZ=Europe/Stockholm
ENV AUDIENCE="https://shiny.unbound.se"

COPY --from=build /release/service /service
COPY public /public

EXPOSE 3333

ENTRYPOINT ["/service"]
