FROM golang:1.26@sha256:1e598ea5752ae26c093b746fd73c5095af97d6f2d679c43e83e0eac484a33dc3 AS build

ARG GITLAB_USER
ARG GITLAB_TOKEN

WORKDIR /build
ENV CGO_ENABLED=0
ENV GOPRIVATE=gitlab.com/unboundsoftware/*
ENV GOEXPERIMENT=jsonv2

COPY go.mod go.sum ./
RUN go mod download

COPY . .
RUN go build -ldflags="-s -w" -o /release/service ./cmd/service

FROM gcr.io/distroless/static-debian12@sha256:20bc6c0bc4d625a22a8fde3e55f6515709b32055ef8fb9cfbddaa06d1760f838

ENV TZ=Europe/Stockholm
ENV AUDIENCE="https://shiny.unbound.se"

COPY --from=build /release/service /service
COPY public /public

EXPOSE 3333

ENTRYPOINT ["/service"]