FROM alpine:3.22
RUN apk add --no-cache ca-certificates tzdata && addgroup -g 10001 acktide && adduser -D -u 10001 -G acktide acktide
WORKDIR /app
COPY --chown=10001:10001 acktide /app/acktide
COPY --chown=10001:10001 web/ /app/web/
USER 10001:10001
ENV WEB_DIR=/app/web LISTEN_ADDR=:8080
EXPOSE 8080
HEALTHCHECK --interval=30s --timeout=3s CMD wget -q -O - http://127.0.0.1:8080/readyz || exit 1
ENTRYPOINT ["/app/acktide"]
