FROM rust:trixie AS builder
RUN apt-get update && apt-get install -y --no-install-recommends \
    pkg-config libssl-dev && \
    rm -rf /var/lib/apt/lists/*
WORKDIR /app
COPY . .
RUN cargo build --release

FROM debian:trixie-slim
RUN apt-get update && apt-get install -y --no-install-recommends \
    ca-certificates adduser && \
    rm -rf /var/lib/apt/lists/* && \
    adduser --disabled-password --gecos '' search_hub
COPY --from=builder /app/target/release/search_hub /usr/local/bin/
USER search_hub
EXPOSE 8080
ENTRYPOINT ["search_hub"]