FROM rust:1-slim-bookworm AS builder
RUN apt-get update && apt-get install -y --no-install-recommends \
    pkg-config libssl-dev cmake build-essential \
    && rm -rf /var/lib/apt/lists/*
RUN cargo install --locked sozuctl

FROM alpine:3.21
RUN apk add --no-cache inotify-tools
COPY --from=builder /usr/local/cargo/bin/sozuctl /usr/local/bin/sozuctl
COPY watch-certs.sh /usr/local/bin/watch-certs
RUN chmod +x /usr/local/bin/watch-certs
ENTRYPOINT ["/usr/local/bin/watch-certs"]