FROM golang:1.26.6-alpine@sha256:3889b425f035be855a72fb4755265311293b6d414521f0a519d819df32222d83 AS builder

ARG SOURCE_DATE_EPOCH=0
ENV SOURCE_DATE_EPOCH=${SOURCE_DATE_EPOCH}

WORKDIR /src/channels/shangwutong

COPY channels/shangwutong/go.mod channels/shangwutong/go.sum ./
RUN go mod download

COPY channels/shangwutong/ ./
RUN CGO_ENABLED=0 GOOS=linux go build -trimpath -buildvcs=false -tags timetzdata -ldflags="-s -w" -o /out/shangwutong ./cmd/shangwutong

FROM alpine:3.22@sha256:14358309a308569c32bdc37e2e0e9694be33a9d99e68afb0f5ff33cc1f695dce

ARG VERSION=dev
ARG COMMIT_SHA=unknown
ARG BUILD_DATE=unknown
ARG SOURCE_DATE_EPOCH=0
LABEL org.opencontainers.image.version="${VERSION}" \
      org.opencontainers.image.revision="${COMMIT_SHA}" \
      org.opencontainers.image.created="${BUILD_DATE}"

RUN addgroup -S -g 10001 connector \
  && adduser -S -D -H -u 10001 -G connector connector \
  && mkdir -p /data /backup \
  && chown connector:connector /data /backup \
  && chmod 0700 /data /backup

COPY --from=builder /out/shangwutong /usr/local/bin/shangwutong

USER connector:connector
VOLUME ["/data", "/backup"]
EXPOSE 9100

HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
  CMD wget -q -T 3 -O /dev/null http://127.0.0.1:9100/readyz || exit 1

ENTRYPOINT ["/usr/local/bin/shangwutong"]
CMD ["serve"]
