FROM golang:1.25-alpine AS builder
WORKDIR /build
COPY go.mod go.sum* ./
RUN go mod download
COPY . .
RUN CGO_ENABLED=0 go build -trimpath -ldflags="-s -w" -o /out/cloud-svc .

FROM alpine:3.20
RUN apk add --no-cache ca-certificates tzdata && adduser -D -u 1000 cloud
WORKDIR /app
COPY --from=builder /out/cloud-svc /app/cloud-svc
USER cloud
EXPOSE 9091
ENTRYPOINT ["/app/cloud-svc"]