explorer

# Stage 1: Build the application
ARG GO_VERSION=1.24
FROM golang:${GO_VERSION}-alpine AS builder

# Install necessary build tools and strip binaries
RUN apk add --no-cache binutils upx git

# Build arguments
ARG VERSION=1.0.0
ARG EXPLORER_PORT=8081

WORKDIR /app

# Copy go.mod and go.sum to leverage Docker cache
COPY go.mod go.sum ./

# Download dependencies only (no tidy needed in Docker)
RUN go mod download

# Copy the entire source tree
COPY . .

# Build the explorer with maximum optimization
RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build \
    -gcflags="-N -l" \
    -trimpath \
    -ldflags="-s -w -buildid=" \
    -o explorer ./cmd/explorer && \
    strip --strip-all explorer && \
    upx --best --lzma explorer && \
    rm -rf /go/pkg /go/src

# Create user and group files for non-root execution
RUN addgroup -g 1000 dero && \
    adduser -D -s /bin/sh -u 1000 -G dero dero

# Stage 2: Create the final minimal image
FROM scratch

ARG VERSION=1.0.0
ARG EXPLORER_PORT=8081

LABEL org.opencontainers.image.version="${VERSION}"
LABEL org.opencontainers.image.description="Dero blockchain explorer"
LABEL org.opencontainers.image.source="https://github.com/civilware/derohe"
LABEL maintainer="moralpriest@tutamail.com"

# Copy user/group files from builder stage
COPY --from=builder /etc/passwd /etc/passwd
COPY --from=builder /etc/group /etc/group

# Copy the binary
COPY --from=builder /app/explorer /explorer

EXPOSE ${EXPLORER_PORT}/tcp

HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
  CMD /explorer --version || exit 1

# Switch to non-root user
USER dero

ENTRYPOINT ["/explorer"]
CMD ["--http-address=0.0.0.0:8081"]