diff options
| -rw-r--r-- | Dockerfile | 60 |
1 files changed, 60 insertions, 0 deletions
diff --git a/Dockerfile b/Dockerfile new file mode 100644 index 0000000..8ba2353 --- /dev/null +++ b/Dockerfile @@ -0,0 +1,60 @@ +# VaporDrop - Multi-stage Docker Build +# Stack: Go + Tor + X25519 + XChaCha20 + BLAKE3 + +# ============================================================================= +# STAGE 1: Build +# ============================================================================= +FROM golang:1.21-alpine AS builder + +RUN apk add --no-cache git ca-certificates tzdata + +WORKDIR /build + +# Copy source files +COPY go.mod ./ +COPY main.go ./ + +# Download dependencies and build with security flags +RUN go mod tidy && \ + CGO_ENABLED=0 GOOS=linux GOARCH=amd64 \ + go build \ + -trimpath \ + -ldflags="-w -s -buildid=" \ + -buildvcs=false \ + -o vapordrop \ + main.go + +# ============================================================================= +# STAGE 2: Runtime +# ============================================================================= +FROM alpine:3.19 + +# Install Tor and minimal deps +RUN apk add --no-cache \ + tor \ + ca-certificates \ + tzdata \ + && rm -rf /var/cache/apk/* \ + && mkdir -p /app/static /app/file_storage /app/.tor + +# Create non-root user +RUN addgroup -g 1000 vapor && \ + adduser -u 1000 -G vapor -h /app -D vapor + +WORKDIR /app + +# Copy binary from builder +COPY --from=builder /build/vapordrop /app/vapordrop + +# Copy static files +COPY static/ /app/static/ + +# Set ownership +RUN chown -R vapor:vapor /app + +# Switch to non-root +USER vapor + +EXPOSE 80 + +ENTRYPOINT ["/app/vapordrop"] |