the beginning of the idiots

qwen/go/Dockerfile

@@ -0,0 +1,48 @@
+# Use the official Golang image to create a build artifact
+# This is a multi-stage build pattern
+FROM golang:1.21-alpine AS builder
+
+# Install git, ca-certificates and other dependencies needed for Go modules
+RUN apk update && apk add --no-cache git ca-certificates tzdata
+
+# Create and change to the app directory
+WORKDIR /app
+
+# Copy go mod files and download dependencies
+COPY go.mod go.sum ./
+RUN go mod download
+
+# Copy local code to the container image
+COPY . ./
+
+# Build the binary
+RUN CGO_ENABLED=0 GOOS=linux go build -v -o server
+
+# Use a Docker multi-stage build to create a lean production image
+FROM golang:1.21-alpine
+
+# Install ca-certificates for SSL connections
+RUN apk --no-cache add ca-certificates
+
+# Create a non-root user
+RUN adduser -D -s /bin/sh appuser
+
+# Copy the pre-built binary file from the previous stage
+COPY --from=builder /app/server /server
+
+# Copy necessary files
+COPY --from=builder /app/static /static
+COPY --from=builder /app/templates /templates
+COPY --from=builder /app/.env /app/.env
+
+# Change ownership of the binary to the non-root user
+RUN chown appuser:appuser /server
+
+# Change to the non-root user
+USER appuser
+
+# Expose the port
+EXPOSE 17000
+
+# Run the server
+CMD ["/server"]