Dockerfile

FROM rust:1.78 as builder

ARG CARGO_NET_GIT_FETCH_WITH_CLI=true

ADD . ./

WORKDIR /backend

RUN cargo build --release

RUN rm -rf root/.ssh/

# Create a new, minimal image to run the app.
FROM debian:bookworm-slim

# Install dependencies.
RUN apt-get update \
    && apt-get install -y ca-certificates tzdata libpq5 \
    && rm -rf /var/lib/apt/lists/*

# Set environment variables.
ENV TZ=Etc/UTC \
    APP_USER=WhatToDo

# Create a user and group used to run the app.
RUN groupadd $APP_USER \
    && useradd -g $APP_USER $APP_USER \
	&& mkdir -p /app

# Copy the build artifact from the build stage.
COPY --from=builder /target/release/backend /app/backend

# Change ownership of the app directory to the app user.
RUN chown -R $APP_USER:$APP_USER /app/
RUN chmod u+x /app/backend

USER $APP_USER

ENTRYPOINT /app/backend --config /secrets/config.yaml