mirror of
https://github.com/btouchard/ackify.git
synced 2026-05-18 06:29:22 -05:00
Benjamin
62f8a56c7a
Add complete Go application for cryptographic document signature validation with OAuth2 authentication, Ed25519 signatures, and PostgreSQL storage following clean architecture principles.
63 lines
1.7 KiB
Docker
63 lines
1.7 KiB
Docker
# ---- Build stage ----
|
|
FROM golang:alpine AS builder
|
|
|
|
# Install security updates and ca-certificates
|
|
RUN apk update && apk add --no-cache ca-certificates git && rm -rf /var/cache/apk/*
|
|
|
|
# Create non-root user for build
|
|
RUN adduser -D -g '' ackuser
|
|
|
|
WORKDIR /app
|
|
|
|
# Copy go mod files first for better layer caching
|
|
COPY go.mod go.sum ./
|
|
|
|
# Set GOTOOLCHAIN to auto to allow Go toolchain updates
|
|
ENV GOTOOLCHAIN=auto
|
|
|
|
RUN go mod download && go mod verify
|
|
|
|
# Copy source code
|
|
COPY . .
|
|
|
|
# Build arguments for metadata
|
|
ARG VERSION="dev"
|
|
ARG COMMIT="unknown"
|
|
ARG BUILD_DATE="unknown"
|
|
|
|
# Build the application with optimizations and metadata
|
|
RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build \
|
|
-a -installsuffix cgo \
|
|
-ldflags="-w -s -X main.Version=${VERSION} -X main.Commit=${COMMIT} -X main.BuildDate=${BUILD_DATE}" \
|
|
-o ackify ./cmd/ackify
|
|
|
|
# ---- Runtime stage ----
|
|
FROM gcr.io/distroless/static-debian12:nonroot
|
|
|
|
# Re-declare ARG for runtime stage
|
|
ARG VERSION="dev"
|
|
|
|
# Add metadata labels
|
|
LABEL maintainer="Benjamin TOUCHARD"
|
|
LABEL version="${VERSION}"
|
|
LABEL description="Ackify - Document signature validation platform"
|
|
LABEL org.opencontainers.image.source="https://github.com/btouchard/ackify"
|
|
LABEL org.opencontainers.image.description="Professional solution for validating and tracking document reading"
|
|
LABEL org.opencontainers.image.licenses="SSPL"
|
|
|
|
# Copy certificates for HTTPS requests
|
|
COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
|
|
|
|
# Set working directory and copy application files
|
|
WORKDIR /app
|
|
COPY --from=builder /app/ackify /app/ackify
|
|
COPY --from=builder /app/web /app/web
|
|
|
|
# Use non-root user (already set in distroless image)
|
|
# USER 65532:65532
|
|
|
|
EXPOSE 8080
|
|
|
|
|
|
ENTRYPOINT ["/app/ackify"]
|