FROM alpine:3.20

RUN apk add --no-cache poppler-utils ca-certificates tzdata && \
    addgroup -g 1000 hako && \
    adduser -D -u 1000 -G hako hako

WORKDIR /app
COPY hako /usr/local/bin/hako
COPY config.e2e.yaml /app/config/config.yaml

RUN chmod +x /usr/local/bin/hako && \
    mkdir -p /app/data /app/data/archives && \
    chown -R hako:hako /app

USER hako
EXPOSE 8080

ENTRYPOINT ["/usr/local/bin/hako"]
CMD ["server", "--config", "/app/config/config.yaml"]