# Runtime only — binary built externally via cargo
FROM debian:bookworm-slim

RUN apt-get update && apt-get install -y --no-install-recommends \
    ca-certificates libssl3 openssh-server \
    && rm -rf /var/lib/apt/lists/*

RUN mkdir -p /run/sshd && \
    ssh-keygen -A && \
    chmod 755 /etc/ssh

WORKDIR /app
COPY target/x86_64-unknown-linux-gnu/release/gitserver /app/gitserver

ENV APP_LOG_LEVEL=info
ENTRYPOINT ["/app/gitserver"]