FROM rust:slim as rust

WORKDIR /src
RUN apt-get update && apt-get install -y git pkg-config libssl-dev
RUN mkdir src && echo "fn main() {}" > src/main.rs

COPY Cargo.toml .
COPY Cargo.lock .

RUN sed -i '/.*build.rs.*/d' Cargo.toml
RUN cargo build --release

COPY . /src
RUN cargo build --release

FROM debian:bookworm-slim

RUN useradd -d /app -u 1001 -g 1001 libmedium
RUN apt-get update
RUN apt-get install -y ca-certificates

WORKDIR /app

COPY --from=rust /src/target/release/libmedium ./
COPY --from=rust /src/config.toml              ./
COPY --from=rust /src/static                   ./static

RUN chown libmedium:libmedium -R /app

USER libmedium
ENTRYPOINT ["/app/libmedium"]