Dockerfile

#
# build backend
#

FROM ghcr.io/hybridgroup/opencv:4.9.0 AS backend

ENV GOPATH=/go

COPY backend /backend

WORKDIR /backend
RUN go build -o /app .

#
# build frontend
#

FROM node:22.7.0 AS frontend

ARG APP_PATH
COPY frontend /frontend

WORKDIR /frontend
RUN if [ -n "$APP_PATH" ]; then node script/update_homepage.js $APP_PATH; fi
RUN npm install
RUN npm run build

#
# build final image
#

FROM alpine:3.20.3

ARG APP_PATH

ENV APP_PATH=${APP_PATH}

COPY --from=backend /app /app
COPY --from=frontend /frontend/build /frontend

RUN apk update && apk add \
libopencv_highgui \
libopencv_videoio \
libopencv_video \
libopencv_objdetect \
libopencv_calib3d \
libopencv_imgcodecs \
libopencv_features2d \
libopencv_dnn \
libopencv_photo \
libopencv_imgproc \
libopencv_core \
libstdc++ \
libgcc \
libc6-compat

# Create non-root user for security
RUN adduser -D -u 1000 appuser

WORKDIR /
EXPOSE 8080

# Run as non-root user (use numeric UID for Kubernetes runAsNonRoot validation)
USER 1000

CMD ["/app"]