FROM golang:1.26-alpine AS builder
RUN apk add --no-cache git
WORKDIR /app
COPY go.mod go.sum ./
RUN go mod download
COPY . .
RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -ldflags="-s -w" -o gateway ./cmd/gateway/

FROM alpine:3.21
RUN apk --no-cache add ca-certificates && addgroup -g 1000 -S gw && adduser -u 1000 -S gw -G gw
WORKDIR /home/gw
COPY --from=builder /app/gateway .
RUN chown gw:gw gateway
USER gw
EXPOSE 8080
ENTRYPOINT ["./gateway"]