pg_guard 0.1.4

A Postgres proxy with built-in safety features
FROM rust:1.87 as builder

WORKDIR /app

COPY Cargo.toml ./

COPY src/ ./src/

RUN cargo build --release

FROM debian:bookworm-slim

RUN apt-get update && apt-get install -y \
    ca-certificates \
    libssl3 \
    && rm -rf /var/lib/apt/lists/*

WORKDIR /app

COPY --from=builder /app/target/release/pg_guard /usr/local/bin/pg_guard

RUN useradd -r -s /bin/false pg_guard

USER pg_guard

EXPOSE 6543

CMD ["pg_guard", "--listen", "0.0.0.0:6543", "--db-url", "postgres://postgres:postgres@postgres:5432/postgres"]