Dockerfile

FROM golang:alpine AS builder
WORKDIR /src

ENV USER=vpn-webauth
ENV UID=10001 

COPY go.mod .
COPY go.sum .
RUN go mod download

RUN apk --update --upgrade --no-cache add git gcc g++ ca-certificates && update-ca-certificates
RUN adduser \    
    --disabled-password \    
    --gecos "" \    
    --home "/nonexistent" \    
    --shell "/sbin/nologin" \    
    --no-create-home \    
    --uid "${UID}" \    
    "${USER}"

COPY . .
RUN CGO_ENABLED=1 GOOS=linux go build -a -installsuffix cgo -ldflags="-w -s" -o /out/vpn-webauth .


FROM alpine AS bin
COPY --from=builder /out/vpn-webauth /
COPY --from=builder /etc/passwd /etc/passwd
COPY --from=builder /etc/group /etc/group
COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
COPY --from=builder /src/templates /templates/

USER vpn-webauth
ENTRYPOINT ["/vpn-webauth"]