1

Dockerfile

@@ -0,0 +1,34 @@
+FROM golang:1.24-alpine AS builder
+
+ARG BUILD_LDFLAGS
+WORKDIR /app
+
+COPY go.mod go.sum ./
+RUN go mod download -x
+
+COPY . .
+
+RUN CGO_ENABLED=0 GOOS=linux go build -ldflags="${BUILD_LDFLAGS}" -trimpath -o main ./cmd/main.go
+
+FROM alpine:3.18 AS certs
+RUN wget -q "https://storage.yandexcloud.net/cloud-certs/CA.pem" -O /YandexInternalRootCA.crt \
+    && chmod 0655 /YandexInternalRootCA.crt
+
+FROM alpine:3.18
+WORKDIR /
+ARG CONFIG_FILE_PATH
+
+
+RUN apk add --no-cache ca-certificates tzdata
+
+COPY --from=certs /YandexInternalRootCA.crt /root/.redis/YandexInternalRootCA.crt
+COPY --from=certs /YandexInternalRootCA.crt /root/.postgres/YandexInternalRootCA.crt
+COPY ${CONFIG_FILE_PATH} /config.yaml
+
+COPY --from=builder /app/main /main
+
+RUN adduser -D -u 10001 appuser && chown appuser /main
+USER appuser
+
+ENTRYPOINT ["/main"]
+CMD ["--config_path", "/config.yaml"]