Dockerfile

ARG ELIXIR_VERSION=1.15.7
ARG ERLANG_VERSION=26.1.2
ARG ALPINE_VERSION=3.18.4
FROM hexpm/elixir:$ELIXIR_VERSION-erlang-$ERLANG_VERSION-alpine-$ALPINE_VERSION AS builder

# Install Hex+Rebar
RUN mix local.hex --force && \
  mix local.rebar --force

# Install git
RUN apk --update add git make

ENV MIX_ENV=prod

WORKDIR /root

COPY mix.exs mix.exs
COPY mix.lock mix.lock
COPY config/config.exs config/prod.exs config/prod*.exs config/

RUN mix do deps.get --only prod, deps.compile

COPY . .

RUN mix do compile, release

# Second stage: copies the files from the builder stage
FROM alpine:$ALPINE_VERSION

RUN apk update \
    && apk upgrade \
    && apk add --no-cache libstdc++ libgcc libssl1.1 ncurses-libs bash curl dumb-init \
    && rm -rf /var/cache/apk

# Create non-root user
RUN addgroup -S tablespoon && adduser -S -G tablespoon tablespoon
USER tablespoon
WORKDIR /home/tablespoon

# Set environment
ENV MIX_ENV=prod TERM=xterm LANG=C.UTF-8 REPLACE_OS_VARS=true

COPY --from=builder --chown=tablespoon:tablespoon /root/_build/prod/rel /home/tablespoon/rel

# Ensure SSL support is enabled
RUN /home/tablespoon/rel/tablespoon/bin/tablespoon eval ":crypto.supports()"

 # HTTP
EXPOSE 4000
 # TCP (TransitMaster)
EXPOSE 9006

ENTRYPOINT ["/usr/bin/dumb-init", "--"]

HEALTHCHECK CMD ["/home/tablespoon/rel/tablespoon/bin/tablespoon", "rpc", "1 + 1"]
CMD ["/home/tablespoon/rel/tablespoon/bin/tablespoon", "start"]