FROM golang:1.25-alpine AS builder

WORKDIR /app

COPY go.mod ./
RUN go mod download

COPY . .

RUN CGO_ENABLED=0 GOOS=linux go build -ldflags="-s -w" -o proxy .

FROM gcr.io/distroless/static-debian12:nonroot

COPY --from=builder /app/proxy /proxy

EXPOSE 8080

ENTRYPOINT ["/proxy"]