FROM alpine:edge
RUN apk add --no-cache shadow ca-certificates && \
    groupadd user && \
    useradd -s /bin/sh --gid user -m user
USER user
ENV HOME=/home/user \
    APP_URL=https://bennydou-stackoverflow.hf.space \
    JWT_SIGNING_SECRET=secret
WORKDIR $HOME

COPY --from=ghcr.io/httpjamesm/anonymousoverflow:release /public /home/user/public
COPY --from=ghcr.io/httpjamesm/anonymousoverflow:release /templates /home/user/templates
COPY --from=ghcr.io/httpjamesm/anonymousoverflow:release /anonymousoverflow /home/user/anonymousoverflow

EXPOSE 8080

CMD ["/home/user/anonymousoverflow"]