Dockerfile

# Build frontend assets
FROM node:22-alpine AS react_builder
WORKDIR /app
COPY . .
RUN corepack enable && yarn install --frozen-lockfile
RUN yarn build

# Build Go binary with minimal dependencies
FROM golang:1.24-alpine AS golang_builder
WORKDIR /app
COPY server/ ./
# Install build dependencies and build with CGO disabled for static binary
RUN apk add --no-cache ca-certificates git && \
    CGO_ENABLED=0 GOOS=linux go build -ldflags="-s -w" -o sqs-admin .

# Final minimal image
FROM scratch
WORKDIR /app

ENV SQS_ADMIN_STATIC_DIR=/app/public

# Copy CA certificates for HTTPS connections
COPY --from=golang_builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/

# Copy compiled assets from previous stages
COPY --from=react_builder /app/dist /app/public
COPY --from=golang_builder /app/sqs-admin /app/

# Run as non-root (nobody)
USER 65534:65534

ENTRYPOINT ["/app/sqs-admin"]