FROM golang:tip-alpine3.23 AS builder
WORKDIR /src

# Install required tools for module download
RUN apk add --no-cache git
COPY go.mod go.sum ./
RUN go mod download
COPY . .
RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o mkcert ./...

FROM alpine:3.23 AS runtime
WORKDIR /app

COPY --from=builder /src/mkcert /usr/local/bin/mkcert
RUN apk add --no-cache ca-certificates
RUN chmod +x /usr/local/bin/mkcert
ENTRYPOINT ["/usr/local/bin/mkcert"]