Dockerfile

ARG ELIXIR_IMAGE=elixir:1.20.2-otp-28-slim@sha256:b5503ad58b44f202200fafd33405d904e7ad16ea68df2b1f60998dead3240e87
ARG RUNTIME_IMAGE=debian:trixie-slim@sha256:3a39a0592364683e6bab97937b72cad5a8fa6dcbbee90edb3bb48c7f8e94f258

FROM ${ELIXIR_IMAGE} AS builder

RUN apt-get update \
    && apt-get install --yes --no-install-recommends build-essential ca-certificates git \
    && rm -rf /var/lib/apt/lists/*

WORKDIR /app

ENV MIX_ENV=prod

RUN mix local.hex --force && mix local.rebar --force

COPY mix.exs mix.lock ./
COPY config config

RUN mix deps.get --only prod && mix deps.compile

COPY assets assets
COPY lib lib
COPY priv priv
COPY rel rel

RUN mix compile \
    && mix assets.deploy \
    && mix release

FROM ${RUNTIME_IMAGE} AS runtime

RUN apt-get update \
    && apt-get install --yes --no-install-recommends \
      ca-certificates \
      libncurses6 \
      libstdc++6 \
      locales \
      openssl \
    && rm -rf /var/lib/apt/lists/* \
    && groupadd --gid 1000 textbin \
    && useradd --uid 1000 --gid textbin --create-home --shell /usr/sbin/nologin textbin

ENV LANG=C.UTF-8 \
    PHX_SERVER=true \
    TEXTBIN_STORAGE_PATH=/var/lib/textbin/pastes \
    TEXTBIN_UPLOAD_TMP_DIR=/var/lib/textbin/uploads

WORKDIR /app

COPY --from=builder --chown=textbin:textbin /app/_build/prod/rel/textbin ./

RUN mkdir -p /var/lib/textbin/pastes /var/lib/textbin/uploads \
    && chown -R textbin:textbin /var/lib/textbin

USER textbin

CMD ["/app/bin/textbin", "start"]