FROM golang:1.27@sha256:0ecdc2a9f6156af6451080bfe3d8382a662fcc4e209608c6f919e643453514c1 AS build

WORKDIR /build
ENV CGO_ENABLED=0
ENV GOEXPERIMENT=jsonv2

COPY go.mod go.sum ./
RUN go mod download

COPY . .
RUN go build -ldflags="-s -w" -o /release/service ./cmd/service

FROM gcr.io/distroless/static-debian12@sha256:d75cdd72874d4790092fcb1b058493ecf6bb5bf2b2b897045b00ff01d91843f2

ENV TZ=Europe/Stockholm
ENV AUDIENCE="https://shiny.unbound.se"

COPY --from=build /release/service /service
COPY public /public

EXPOSE 3333

ENTRYPOINT ["/service"]