FROM ubuntu:24.04

COPY postwerk /usr/local/bin/postwerk
COPY postwerk.toml /etc/postwerk/postwerk.toml

RUN apt-get update \
    && apt-get install -y --no-install-recommends ca-certificates \
    && rm -rf /var/lib/apt/lists/* \
    && chmod 0755 /usr/local/bin/postwerk \
    && mkdir -p /var/lib/postwerk/blobs \
    && chown -R 1000:1000 /var/lib/postwerk /etc/postwerk

USER 1000:1000
EXPOSE 3000

ENTRYPOINT ["/usr/local/bin/postwerk"]
CMD ["--config", "/etc/postwerk/postwerk.toml", "api", "serve", "--bind", "0.0.0.0:3000", "--unsafe-bind", "--authz-mode", "oidc-regelwerk"]
