# syntax=docker/dockerfile:1
FROM golang:1.25-alpine AS build
WORKDIR /src
COPY go.mod go.sum ./
RUN go mod download
COPY . .
RUN CGO_ENABLED=0 go build -ldflags="-s -w" -o /out/TokenThief ./

FROM alpine:3.20
RUN apk add --no-cache ca-certificates tzdata && \
    addgroup -S app && adduser -S -G app app
COPY --from=build /out/TokenThief /usr/local/bin/TokenThief
COPY filter.yaml /etc/tokenthief/filter.yaml
ENV FILTER_FILE=/etc/tokenthief/filter.yaml \
    TZ=Asia/Shanghai
USER app
EXPOSE 8080
ENTRYPOINT ["/usr/local/bin/TokenThief"]