FROM rust:1.75 as builder

WORKDIR /usr/src/vaultmesh

# Copy workspace Cargo files
COPY Cargo.toml Cargo.lock ./
COPY vaultmesh-core ./vaultmesh-core
COPY vaultmesh-observability ./vaultmesh-observability

# Build release binary
RUN cargo build --release --package vaultmesh-observability

FROM debian:bookworm-slim

RUN apt-get update && apt-get install -y ca-certificates && rm -rf /var/lib/apt/lists/*

COPY --from=builder /usr/src/vaultmesh/target/release/vaultmesh-observability /usr/local/bin/vaultmesh-observability

EXPOSE 9108

USER 1000

ENTRYPOINT ["/usr/local/bin/vaultmesh-observability"]