From fd69e33a98c26976bd3c68751a3c08cd96794fd2 Mon Sep 17 00:00:00 2001
From: riotpiaole <19826264+Riotpiaole@users.noreply.github.com>
Date: Mon, 22 Jun 2026 06:30:31 -0700
Subject: [PATCH] build: add Dockerfile for the message-plane server

Multi-stage build (golang:1.26 -> distroless/static-nonroot), CGO disabled,
GOPRIVATE set for the kmsvc-proto module fetch.
---
 Dockerfile | 12 ++++++++++++
 1 file changed, 12 insertions(+)
 create mode 100644 Dockerfile

diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 0000000..d24835e
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,12 @@
+FROM golang:1.26 AS build
+WORKDIR /src
+ENV GOPRIVATE=forgejo.riotpiao.homelab.com
+COPY go.mod go.sum ./
+RUN go mod download
+COPY . .
+RUN CGO_ENABLED=0 go build -trimpath -o /out/kmsvc-server ./cmd/server
+
+FROM gcr.io/distroless/static-debian12:nonroot
+COPY --from=build /out/kmsvc-server /kmsvc-server
+USER nonroot:nonroot
+ENTRYPOINT ["/kmsvc-server"]