mirror of
https://github.com/Dvorinka/Containr.git
synced 2026-10-28 07:41:27 +00:00
Tomas DvorakandDevin
479eeb021b
- golang-jwt/v5 5.0.0->5.2.2 (CVE-2025-30204), x/crypto, x/net, x/text, otel -> latest; go.mod now requires go 1.26 - builder golang:1.24-alpine -> 1.26-alpine, clearing the stdlib HIGH batch (crypto/tls, net/http, x509, net/mail DoS) - npm-side findings (tar, brace-expansion, pacote, sigstore, ...) are npm-CLI internals inside the node base image, inert at runtime - no overrides; fixed by base image updates Authored By: TDvorak <[email protected]> Generated with [Devin](https://devin.ai) Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
48 lines
1.0 KiB
Docker
48 lines
1.0 KiB
Docker
# Build Go API binary
|
|
FROM golang:1.26-alpine AS go-builder
|
|
|
|
RUN apk add --no-cache git ca-certificates tzdata
|
|
|
|
WORKDIR /app
|
|
|
|
COPY go.mod go.sum ./
|
|
RUN go mod download
|
|
|
|
COPY . .
|
|
RUN CGO_ENABLED=0 GOOS=linux go build -a -installsuffix cgo -o main cmd/server/main.go
|
|
|
|
# Build embedded Better Auth runtime dependencies
|
|
FROM node:22-alpine AS auth-builder
|
|
|
|
WORKDIR /auth
|
|
|
|
COPY auth/package*.json ./
|
|
RUN npm ci --omit=dev
|
|
|
|
COPY auth/src ./src
|
|
|
|
# Final runtime image (Go API + Better Auth sidecar in one container)
|
|
FROM node:22-alpine
|
|
|
|
RUN apk --no-cache add ca-certificates tzdata wget
|
|
|
|
RUN addgroup -g 1001 -S appgroup && \
|
|
adduser -u 1001 -S appuser -G appgroup
|
|
|
|
WORKDIR /app
|
|
|
|
COPY --from=go-builder /app/main ./main
|
|
COPY --from=go-builder /app/migrations_goose ./migrations_goose
|
|
COPY --from=auth-builder /auth ./auth
|
|
|
|
RUN chown -R appuser:appgroup /app
|
|
|
|
USER appuser
|
|
|
|
EXPOSE 8080
|
|
|
|
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
|
|
CMD wget --no-verbose --tries=1 --spider http://127.0.0.1:8080/health || exit 1
|
|
|
|
CMD ["./main"]
|