Consider From scratch

[tiswas247]

I noticed you're running the service on FROM ubuntu:22.04

I would recommend you build a musl target i.e. a static executable and completely remove ubuntu altogether. This will give a small image but more importantly reduce the attack surface.

Another alternative is to use Docker hardened images.

If you like, I'd be happy to create a PR for this.

Thanks

[linear]

from @fergusfinn:

go for it!