FROM golang:1.24-alpine AS build

WORKDIR /src

COPY go.mod go.sum ./
RUN go mod download

COPY . .
RUN CGO_ENABLED=0 go build -trimpath -ldflags '-s -w' -o /out/cepis-telegram .

FROM gcr.io/distroless/static-debian12:nonroot

COPY --from=build /out/cepis-telegram /cepis-telegram

USER nonroot:nonroot
ENTRYPOINT ["/cepis-telegram"]