FROM golang:1.22-bookworm AS build WORKDIR /app COPY go.mod go.sum ./ RUN go mod download COPY . ./ RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o /out/server . FROM gcr.io/distroless/static-debian12:nonroot WORKDIR /app COPY --from=build /out/server /app/server COPY --from=build /app/web /app/web ENV PORT=7860 EXPOSE 7860 USER nonroot:nonroot ENTRYPOINT ["/app/server"]