FROM alpine:3.20 AS builder

RUN apk add --no-cache \
    gcc \
    musl-dev \
    pcre-dev \
    openssl-dev \
    make \
    git

WORKDIR /build

COPY . .

RUN make release \
    && strip bin/nimcheck

FROM alpine:3.20 AS runtime

RUN apk add --no-cache \
    pcre \
    openssl \
    ca-certificates \
    tzdata

ENV TZ=UTC
ENV NIMCHECK_LOG_LEVEL=info
ENV NIMCHECK_THREADS=4

RUN addgroup -g 1000 nimcheck \
    && adduser -D -u 1000 -G nimcheck nimcheck

COPY --from=builder /build/bin/nimcheck /usr/local/bin/nimcheck

RUN chmod 755 /usr/local/bin/nimcheck

WORKDIR /workspace

USER nimcheck

HEALTHCHECK --interval=30s --timeout=3s --retries=3 \
    CMD nimcheck --version || exit 1

ENTRYPOINT ["nimcheck"]
CMD ["--help"]