FROM rust:latest AS builder WORKDIR /app COPY . . RUN cargo build --release FROM debian:bookworm-slim # Create the app user with UID 1001 RUN useradd -u 1001 -m appuser # Create working directory (only needed if your app expects /app) WORKDIR /app # Copy binary from builder COPY --from=builder /app/target/release/hotel-api-rs /usr/local/bin/hotel-api-rs # Switch to non-root user USER 1001 # Expose API port EXPOSE 8080 CMD ["/usr/local/bin/hotel-api-rs"]