Dockerfile

# syntax=docker/dockerfile:1

FROM rust:1-trixie AS chef
RUN cargo install cargo-chef --locked
WORKDIR /app

FROM chef AS planner
COPY . .
RUN cargo chef prepare

FROM chef AS builder
COPY --from=planner /app/recipe.json recipe.json
RUN cargo chef cook --release
COPY . .
RUN cargo build --release

FROM debian:trixie-slim AS download
ARG IP2PROXY_FILE=PX2BIN
RUN apt-get update && \
    apt-get install -y --no-install-recommends wget unzip ca-certificates && \
    rm -rf /var/lib/apt/lists/*
COPY update-ip2proxy.sh /usr/local/bin/update-ip2proxy.sh
ARG IP2PROXY_CACHEBUST=0
RUN --mount=type=secret,id=IP2PROXY_TOKEN \
    mkdir -p /data && \
    LILA_IP2PROXY_DATA_DIR=/data \
    LILA_IP2PROXY_UPDATE_TOKEN="$(cat /run/secrets/IP2PROXY_TOKEN)" \
    LILA_IP2PROXY_UPDATE_FILE="$IP2PROXY_FILE" \
    /usr/local/bin/update-ip2proxy.sh

FROM debian:trixie-slim AS runtime
RUN groupadd -g 1001 lichess && \
    useradd -u 1001 -g lichess -m -d /home/lichess -s /bin/bash lichess
COPY --from=builder --chown=lichess:lichess /app/target/release/lila-ip2proxy /usr/local/bin/lila-ip2proxy
COPY --from=download --chown=lichess:lichess /data /data
USER lichess
ENV LILA_IP2PROXY_DB=/data/IP2PROXY-IP-PROXYTYPE-COUNTRY.BIN
ENTRYPOINT ["/usr/local/bin/lila-ip2proxy"]