FROM golang:1.27.3-alpine AS go-toolchain

FROM caddy:2.11.8-builder AS builder
COPY --from=go-toolchain /usr/local/go /opt/go
ENV GOROOT=/opt/go PATH=/opt/go/bin:$PATH GOTOOLCHAIN=local GOMAXPROCS=2
RUN apk add --no-cache 'ca-certificates>=20261020-r0' \
    && test "$(go env GOVERSION)" = go1.27.3 \
    && xcaddy build v2.11.9 --with github.com/mholt/caddy-ratelimit@v0.1.0

FROM caddy:2.11.8
RUN apk add --no-cache 'ca-certificates>=20261020-r0'
COPY --from=builder /usr/bin/caddy /usr/bin/caddy