FROM eclipse-temurin:21-jdk-jammy

RUN apt-get update && \
    apt-get install -y --no-install-recommends \
    curl \
    vim \
    git \
    ca-certificates \
    ffmpeg && \
    rm -rf /var/lib/apt/lists/*

# Create non-root user
RUN groupadd --gid 1000 spring-app && \
    useradd --uid 1000 --gid spring-app --shell /bin/bash --create-home spring-app

RUN mkdir -p /home/spring-app/.m2 && \
    chown -R spring-app:spring-app /home/spring-app/.m2

WORKDIR /app

COPY mvnw .
COPY .mvn .mvn
COPY pom.xml .
COPY target target

RUN chmod +x mvnw && \
    chown -R spring-app:spring-app /app

USER spring-app:spring-app

COPY src ./src

EXPOSE 8080

ENTRYPOINT ["./mvnw", "spring-boot:run"]