FROM rust:latest as builder

USER root

RUN apt update && apt install -y ca-certificates

WORKDIR /app
COPY Cargo.toml .
COPY src ./src

RUN cargo build --release

FROM gcr.io/distroless/cc-debian13:nonroot

COPY --from=builder /app/target/release/image-proxy /usr/local/bin/image-proxy

COPY --from=builder /etc/ssl /etc/ssl

EXPOSE 8080

ENTRYPOINT ["image-proxy"]