FROM eclipse-temurin:21-jre-alpine

ENV TZ=Asia/Shanghai \
    JAVA_OPTS="-Xms256m -Xmx512m -XX:+UseG1GC"

WORKDIR /app

RUN addgroup -S app && adduser -S app -G app

COPY target/payment-platform-1.0.0.jar app.jar

EXPOSE 8081

USER app

CMD ["sh", "-c", "java $JAVA_OPTS -jar app.jar"]