first commit
This commit is contained in:
+40
@@ -0,0 +1,40 @@
|
||||
# Multi-stage build yang lebih optimal
|
||||
FROM golang:1.22-alpine AS build
|
||||
|
||||
# Install build dependencies
|
||||
RUN apk add --no-cache git ca-certificates tzdata
|
||||
|
||||
WORKDIR /build
|
||||
|
||||
# Cache go mod dependencies
|
||||
COPY go.mod go.sum ./
|
||||
RUN go mod download && go mod verify
|
||||
|
||||
# Copy source code
|
||||
COPY . .
|
||||
|
||||
# Build dengan optimasi
|
||||
RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 \
|
||||
go build -a -installsuffix cgo \
|
||||
-ldflags='-w -s -extldflags "-static"' \
|
||||
-o main cmd/api/main.go
|
||||
|
||||
# Final stage - distroless untuk keamanan
|
||||
FROM gcr.io/distroless/static:nonroot
|
||||
|
||||
# Copy timezone data
|
||||
COPY --from=build /usr/share/zoneinfo /usr/share/zoneinfo
|
||||
|
||||
# Copy binary
|
||||
COPY --from=build /build/main /app/main
|
||||
|
||||
# Use non-root user
|
||||
USER nonroot:nonroot
|
||||
|
||||
# Health check
|
||||
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
|
||||
CMD ["/app/main", "-health"] || exit 1
|
||||
|
||||
EXPOSE 8080
|
||||
|
||||
ENTRYPOINT ["/app/main"]
|
||||
Reference in New Issue
Block a user