FROM golangci/golangci-lint:latest as golangci
FROM golang:1.24.0-bookworm as base
RUN curl --proto '=https' --tlsv1.2 -sSf https://just.systems/install.sh | bash -s -- --to /usr/local/bin 
ARG version

RUN mkdir -p /app
WORKDIR /app

COPY --from=golangci /usr/bin/golangci-lint /usr/bin/golangci-lint
COPY . /app/


RUN just build $version

FROM public.ecr.aws/s0f9o2k5/base:v0.1.0
RUN useradd -s /usr/sbin/nologin \
            --create-home \
            --home-dir /opt/app \
            app

WORKDIR /opt/app
RUN install_deb git \
        && mkdir /opt/repos \
            && chown app:app /opt/repos/
USER app

COPY --from=base /app/_build/ /opt/app/
COPY --from=base /app/auth_model.ini /opt/app/etc/auth_model.ini

CMD ["/opt/app/bin/go-git-server", "-r", "/opt/repos", "-t", "/tokens/tokens.csv", "-p", "/opt/app/etc/policy.csv", "-m", "/opt/app/etc/auth_model.ini", "-a", "-s", "gitserver.yaml"]