FROM golang:1.26 AS builder
WORKDIR /src
COPY go.mod go.sum ./
RUN go mod download
COPY . .
RUN CGO_ENABLED=0 GOOS=linux go build -o /out/atproto-auth-proxy .

FROM gcr.io/distroless/base-debian12
COPY --from=builder /out/atproto-auth-proxy /app/atproto-auth-proxy
EXPOSE 8080
ENTRYPOINT ["/app/atproto-auth-proxy"]