Dockerfile

# Build stage
FROM golang:1.25.4-alpine AS builder

# Install build dependencies
RUN apk add --no-cache git gcc musl-dev sqlite-dev

# Set working directory
WORKDIR /app

# Copy go mod files
COPY go.mod go.sum ./

# Download dependencies
RUN go mod download

# Copy source code
COPY . .

# Build the application
RUN CGO_ENABLED=1 GOOS=linux go build -installsuffix cgo -ldflags="-w -s" -o discord-github-bot main.go

# Runtime stage
FROM alpine:latest

# Install runtime dependencies
RUN apk --no-cache add ca-certificates sqlite-libs

# Create non-root user
RUN addgroup -g 1000 botuser && \
    adduser -D -u 1000 -G botuser botuser

WORKDIR /home/botuser

# Copy binary from builder
COPY --from=builder /app/discord-github-bot .

# Copy templates directory
COPY --from=builder /app/templates ./templates

# Create directory for database
RUN mkdir -p /home/botuser/data && \
    chown -R botuser:botuser /home/botuser

# Switch to non-root user
USER botuser

# Expose OAuth server port
EXPOSE 8080

# Run the bot
CMD ["./discord-github-bot"]