# ─── Stage 1: Builder ───
FROM docker.io/library/rust:1.85-bookworm AS builder
WORKDIR /build
# Copy source
COPY . .
# Build release binary
RUN cargo build --release
# ─── Stage 2: Runtime ───
FROM docker.io/library/debian:bookworm-slim
RUN apt-get update && apt-get install -y --no-install-recommends \
ca-certificates libssl3 \
&& rm -rf /var/lib/apt/lists/*
WORKDIR /app
COPY --from=builder /build/target/release/pdt ./
COPY --from=builder /build/config-sample.toml ./config.toml
COPY --from=builder /build/policies/ ./policies/
ENV PDT_HOST=0.0.0.0
ENV PDT_PORT=8080
ENV RUST_LOG=info
EXPOSE 8080
CMD ["./pdt"]