FROM golang:1.25-alpine AS builder
WORKDIR /app

RUN echo "singteam:x:1000:1000:singteam:/var/lib/singteam:/sbin/nologin" > /tmp/passwd && \
    echo "singteam:x:1000:singteam" > /tmp/group && \
    mkdir -p /tmp/var/lib/singteam && \
    mkdir -p /tmp/certs

FROM gcr.io/distroless/base:debug
ARG TARGETPLATFORM
COPY ${TARGETPLATFORM}/singteam-proxy /go/bin/singteam-proxy
COPY --from=builder /tmp/passwd /etc/passwd
COPY --from=builder /tmp/group /etc/group
COPY --from=builder --chown=1000:1000 /tmp/var/lib/singteam /var/lib/singteam
COPY --from=builder --chown=1000:1000 --chmod=755 /tmp/certs /certs
USER singteam:singteam
ENV HOME=/var/lib/singteam
ENV NB_PROXY_ADDRESS=":8443"
EXPOSE 8443
ENTRYPOINT ["/go/bin/singteam-proxy"]
