# Multi-stage Docker build for Legalis API
# Stage 1: Builder
FROM rust:1.75-slim as builder
WORKDIR /build
# Install dependencies
RUN apt-get update && apt-get install -y \
pkg-config \
libssl-dev \
&& rm -rf /var/lib/apt/lists/*
# Copy workspace files
COPY Cargo.toml Cargo.lock ./
COPY crates ./crates
# Build the release binary
RUN cargo build --release --bin legalis-api-server
# Stage 2: Runtime
FROM debian:bookworm-slim
WORKDIR /app
# Install runtime dependencies
RUN apt-get update && apt-get install -y \
ca-certificates \
libssl3 \
&& rm -rf /var/lib/apt/lists/*
# Copy the binary from builder
COPY --from=builder /build/target/release/legalis-api-server /app/legalis-api-server
# Create a non-root user
RUN useradd -m -u 1000 legalis && chown -R legalis:legalis /app
USER legalis
# Expose the API port
EXPOSE 3000
# Health check
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
CMD curl -f http://localhost:3000/health || exit 1
# Run the server
ENTRYPOINT ["/app/legalis-api-server"]