# syntax=docker/dockerfile:1
FROM rust:alpine AS builder
RUN apk add --no-cache musl-dev
WORKDIR /app
COPY . ./
RUN cargo build --release --target x86_64-unknown-linux-musl
RUN strip /app/target/x86_64-unknown-linux-musl/release/authzd

FROM gcr.io/distroless/static-debian12:nonroot
EXPOSE 50051
WORKDIR /var/www
COPY --from=builder /app/target/x86_64-unknown-linux-musl/release/authzd /bin/authzd
COPY --from=builder /app/etc/authzd /etc/authzd
ENTRYPOINT ["/bin/authzd"]