real init

Dockerfile

@@ -0,0 +1,30 @@
+# Stage 1: Build the UI bundle
+FROM oven/bun:1.3.9-alpine AS frontend-builder
+WORKDIR /app
+# Copy the lockfile so `bun ci` can accurately install
+COPY src/frontend/package.json src/frontend/bun.lock ./
+RUN bun ci
+COPY src/frontend/ ./
+RUN bun run build
+
+# Stage 2: Build the static Go binary
+FROM golang:1.26-alpine AS go-builder
+WORKDIR /app
+COPY src/go.mod src/go.sum ./
+RUN go mod download
+# This dumps main.go and the frontend dir into /app
+COPY src/ .
+# Copy the built UI into the frontend folder so go:embed finds it
+COPY --from=frontend-builder /app/dist ./frontend/dist
+# Build a statically linked binary, stripping debug symbols (-s -w) for smaller size
+RUN CGO_ENABLED=0 GOOS=linux go build -ldflags="-s -w" -o server .
+RUN apk add --no-cache ca-certificates
+
+# Stage 3: The final minimal image
+FROM scratch
+# The binary is at /app/server, not src/app/server
+COPY --from=go-builder /app/server /server
+# Copy SSL certs
+COPY --from=go-builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
+EXPOSE 8080
+ENTRYPOINT ["/server"]