Dockerfile

# syntax=docker/dockerfile:1

# golang:1.27.1-trixie; keep in sync with go.mod.
FROM --platform=$BUILDPLATFORM golang@sha256:8f58fd67ea075142d947a60e0caa4317746a55118d312f027793d382c7741734 AS build

WORKDIR /src

COPY go.mod go.sum ./
RUN --mount=type=cache,target=/go/pkg/mod go mod download

COPY cmd ./cmd
COPY internal ./internal

ARG TARGETOS
ARG TARGETARCH
ARG VERSION=dev
RUN --mount=type=cache,target=/go/pkg/mod \
    --mount=type=cache,target=/root/.cache/go-build \
    CGO_ENABLED=0 GOOS=$TARGETOS GOARCH=$TARGETARCH \
    go build -trimpath -ldflags "-s -w -X main.version=$VERSION" -o /magnetowid ./cmd/magnetowid

# alpine:3.24.2 supplies ffmpeg's runtime dependencies.
FROM alpine@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6

LABEL org.opencontainers.image.title="magnetowid" \
      org.opencontainers.image.description="Downloads movies and series from video-on-demand sites for Sonarr and Radarr." \
      org.opencontainers.image.source="https://github.com/combor/magnetowid" \
      org.opencontainers.image.licenses="BSD-3-Clause"

# Make fresh named volumes writable by the default user.
RUN apk add --no-cache ffmpeg \
    && install -d -o 65532 -g 65532 /downloads

COPY --from=build /magnetowid /usr/local/bin/magnetowid
COPY LICENSE /usr/share/licenses/magnetowid/LICENSE

ENV MAGNETOWID_DOWNLOAD_DIR=/downloads
EXPOSE 8484

HEALTHCHECK --interval=30s --timeout=10s --start-period=30s --start-interval=2s \
    CMD ["/usr/local/bin/magnetowid", "-healthcheck"]

USER 65532:65532
ENTRYPOINT ["/usr/local/bin/magnetowid"]