FROM gcr.io/distroless/static-debian12:nonroot@sha256:aef9602f8710ec12bde19d593fed1f76c708531bb7aba205110f1029786ead7b

ARG SOURCE_SHA
LABEL org.opencontainers.image.source="https://github.com/pingcap-inc/nexuscrm-api-host" \
      org.opencontainers.image.revision="${SOURCE_SHA}"
COPY --chown=nonroot:nonroot gateway-binary /usr/local/bin/gateway

USER nonroot:nonroot
ENTRYPOINT ["/usr/local/bin/gateway"]