FROM golang:1.24-alpine AS build

WORKDIR /src
COPY . .
RUN CGO_ENABLED=1 GOOS=linux GOARCH=amd64 go build -o /out/secretapi .

FROM alpine:3.20

RUN addgroup -S edut && adduser -S -G edut edut
WORKDIR /app
COPY --from=build /out/secretapi /usr/local/bin/secretapi

USER edut
EXPOSE 8080
ENTRYPOINT ["/usr/local/bin/secretapi"]