1FROM rust:1.88-alpine AS build
2RUN apk add --no-cache musl-dev
3WORKDIR /app
4COPY . .
5RUN cargo build --release --locked
6
7FROM alpine:3.20
8RUN apk add --no-cache git xz \
9    && git config --system --add safe.directory '*'
10RUN addgroup -S -g 10001 teak && adduser -S -u 10001 -G teak teak
11COPY --from=build /app/target/release/teak /usr/local/bin/teak
12USER teak
13VOLUME ["/srv/git"]
14EXPOSE 3000
15ENTRYPOINT ["teak"]
16CMD ["--root", "/srv/git"]