fix: include envoy config and tighten mfa image

Author: haasonsaas

docker-compose.secure.yml

@@ -58,8 +58,8 @@ services:
 
   envoy:
     build:
-      context: .
-      dockerfile: envoy/Dockerfile
+      context: ./envoy
+      dockerfile: Dockerfile
     ports:
       - "8080:8080"
     platform: linux/amd64

services/mfa/Dockerfile

@@ -7,12 +7,11 @@ RUN go mod download
 COPY . .
 RUN go build -o mfa ./cmd/mfa
 
-FROM alpine:latest
-RUN apk --no-cache add ca-certificates
-WORKDIR /root/
+FROM scratch
 
-COPY --from=builder /app/mfa .
+COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
+COPY --from=builder /app/mfa /mfa
 
 EXPOSE 8445
 
-CMD ["./mfa"]
+ENTRYPOINT ["/mfa"]