# Build stage FROM golang:1.23-alpine AS builder # Install git for go mod download RUN apk add --no-cache git # Set working directory WORKDIR /app # Copy go mod files COPY go.mod go.sum ./ # Download dependencies RUN go mod download # Copy source code COPY . . # Build the application RUN CGO_ENABLED=0 GOOS=linux go build -a -installsuffix cgo -o bin/spiderman cmd/server/main.go # Final stage FROM alpine:3.18 # Install ca-certificates for HTTPS requests RUN apk --no-cache add ca-certificates # Create non-root user RUN addgroup -S appgroup && adduser -S appuser -G appgroup WORKDIR /root/ # Copy the binary from builder stage COPY --from=builder /app/bin/spiderman . # Copy any needed configuration files COPY --from=builder /app/docs ./docs # Change ownership to non-root user RUN chown -R appuser:appgroup /root/ # Switch to non-root user USER appuser # Expose port EXPOSE 8080 # Health check HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \ CMD wget --no-verbose --tries=1 --spider http://localhost:8080/health || exit 1 # Run the application CMD ["./spiderman"]