# syntax=docker/dockerfile:1.20.0

FROM golang:1.26.5-alpine3.23@sha256:622e56dbc11a8cfe87cafa2331e9a201877271cbff918af53d3be315f3da88cc AS builder

ENV CGO_ENABLED=0
ENV GOTOOLCHAIN=local

WORKDIR /src

RUN go mod init who-need-help/caddy-build \
  && go get github.com/caddyserver/caddy/v2/cmd/caddy@v2.11.4 \
  && go get google.golang.org/grpc@v1.82.1 \
  && test "$(go list -m -f '{{.Version}}' google.golang.org/grpc)" = "v1.82.1" \
  && go build \
    -trimpath \
    -ldflags="-s -w -X github.com/caddyserver/caddy/v2.CustomVersion=v2.11.4-wnh-grpc1.82.1" \
    -o /out/caddy \
    github.com/caddyserver/caddy/v2/cmd/caddy

RUN mkdir -p /rootfs/data/caddy /rootfs/config/caddy /rootfs/tmp \
  && chown -R 1000:1000 /rootfs

FROM scratch

ENV XDG_CONFIG_HOME=/config
ENV XDG_DATA_HOME=/data
ENV HOME=/tmp

COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
COPY --from=builder /out/caddy /usr/bin/caddy
COPY --from=builder --chown=1000:1000 /rootfs/data /data
COPY --from=builder --chown=1000:1000 /rootfs/config /config
COPY --from=builder --chown=1000:1000 /rootfs/tmp /tmp

USER 1000:1000
WORKDIR /srv

EXPOSE 80 443 443/udp 2019

ENTRYPOINT ["/usr/bin/caddy"]
CMD ["run", "--config", "/etc/caddy/Caddyfile", "--adapter", "caddyfile"]