# Dockerfile for Nerd Monitor Agent
# Multi-stage build optimized for minimal size

FROM golang:1.23-alpine AS builder

WORKDIR /app

# Install build dependencies
RUN apk add --no-cache git make

# Copy go mod files
COPY go.mod go.sum ./

# Download dependencies
RUN go mod download

# Copy source code
COPY . .

# Build the agent
RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -ldflags="-w -s" -o bin/nerd-monitor-agent ./cmd/agent

# Runtime stage
FROM alpine:latest

WORKDIR /app

# Install runtime dependencies (minimal)
RUN apk add --no-cache ca-certificates tzdata

# Copy binary from builder
COPY --from=builder /app/bin/nerd-monitor-agent /app/nerd-monitor-agent

# Create non-root user for security
RUN addgroup -g 1000 nerdmonitor && adduser -D -u 1000 -G nerdmonitor nerdmonitor

# Change ownership
RUN chown -R nerdmonitor:nerdmonitor /app

# Switch to non-root user
USER nerdmonitor

# Default environment variables
ENV SERVER=localhost:8080
ENV INTERVAL=15s

# Run the agent
ENTRYPOINT ["/app/nerd-monitor-agent"]
CMD ["--server", "${SERVER}", "--interval", "${INTERVAL}"]