FROM debian:bookworm-slim

RUN apt-get update && \
    apt-get install -y --no-install-recommends wget ca-certificates ffmpeg && \
    rm -rf /var/lib/apt/lists/*

RUN wget -O /usr/local/bin/go2rtc \
    https://github.com/AlexxIT/go2rtc/releases/latest/download/go2rtc_linux_amd64 && \
    chmod +x /usr/local/bin/go2rtc

RUN useradd -m appuser
USER appuser

COPY --chown=appuser:appuser go2rtc.yaml /home/appuser/go2rtc.yaml
COPY --chown=appuser:appuser web/ /home/appuser/web/

EXPOSE 7860

CMD ["go2rtc", "-config", "/home/appuser/go2rtc.yaml"]