FROM rust:1.75-alpine AS builder
WORKDIR /app
RUN apk add --no-cache musl-dev openssl-dev pkgconfig
COPY Cargo.toml ./
COPY src ./src
RUN cargo build --release

FROM alpine:3.19 AS runtime
WORKDIR /home/bitcoin
RUN adduser -D blindbit && \
    mkdir -p /home/bitcoin/.bitcoin && chown -R blindbit:blindbit /home/bitcoin
COPY --from=builder /app/target/release/blindbit /usr/local/bin/blindbit
EXPOSE 8000
USER blindbit
CMD ["/usr/local/bin/blindbit", "--config", "/home/bitcoin/blindbit.toml"]