Update Dockerfile

Dockerfile

@@ -1,26 +1,29 @@
-# Stage 1: Build the binary straight from GitHub source
+# Step 1: Use an official Go alpine build environment
 FROM golang:1.22-alpine AS builder
 
-RUN apk add --no-cache git
+# Install secure networking tools
+RUN apk add --no-cache git ca-certificates
 
 WORKDIR /app
 
-# Automatically clone the exact source code repository
+# Clone the exact repository target into the app directory
 RUN git clone https://github.com .
 
-# Compile the application
-RUN go build -o cliproxy ./cmd/main.go
+# Fetch dependencies and compile the runtime binary safely
+RUN go mod download && CGO_ENABLED=0 GOOS=linux go build -ldflags="-w -s" -o cliproxy ./cmd/main.go
 
-# Stage 2: Create a minimal deployment image
+# Step 2: Use a clean runtime environment
 FROM alpine:latest
+RUN apk add --no-cache ca-certificates
+
 WORKDIR /app
 
-# Pull the compiled binary and example config from stage 1
+# Copy compiled executable and the baseline layout blueprint from builder stage
 COPY --from=builder /app/cliproxy .
 COPY --from=builder /app/config.example.yaml ./config.yaml
 
-# Hugging Face Spaces strictly run on port 7860
+# Open the network listener gate required by Hugging Face Spaces
 EXPOSE 7860
 
-# Execute the application on the required port
+# Run the proxy, binding it explicitly to Hugging Face's assigned port layout
 CMD ["./cliproxy", "--port", "7860"]