Dockerfile.dev

# audit-worker - Development Dockerfile for Tilt Live Update
# Uses Debian bookworm for CGO support (required by confluent-kafka-go/librdkafka)

FROM golang:1.26.2-bookworm AS builder

# Install build dependencies for CGO (librdkafka)
RUN apt-get update && apt-get install -y --no-install-recommends \
    ca-certificates \
    tzdata \
    bash \
    librdkafka-dev \
    && rm -rf /var/lib/apt/lists/*

# Create non-root user for security
RUN useradd -u 65532 -s /bin/false nonroot

# Set working directory
WORKDIR /app

# Copy go mod files first for better caching
COPY go.mod go.sum* ./
RUN go mod download && go mod verify

# Copy source code
COPY . .

# Build binary with CGO enabled for Kafka support
ARG VERSION=dev
ARG COMMIT=unknown
ARG BUILD_DATE=unknown
# TARGETARCH is automatically set by Docker Buildx based on --platform flag
# No default - let the build system determine the correct architecture
ARG TARGETARCH

RUN CGO_ENABLED=1 GOOS=linux GOARCH=${TARGETARCH} go build \
    -ldflags="-X main.Version=${VERSION} -X main.Commit=${COMMIT} -X main.BuildDate=${BUILD_DATE}" \
    -o audit-worker \
    ./services/audit-worker/cmd

# Switch to non-root user
USER nonroot:nonroot

# Expose port
EXPOSE 8080

# Run the binary
ENTRYPOINT ["/app/audit-worker"]