From b67d110b79be6b95f289959959e3b4a25682196d Mon Sep 17 00:00:00 2001
From: Van Phan Dinh <vanphandinh@outlook.com>
Date: Wed, 9 Sep 2026 21:24:30 +0700
Subject: [PATCH] fix(docker): support root-mounted token files

---
 Dockerfile | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 0daab4223..88e086568 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -38,8 +38,10 @@ RUN --mount=type=cache,target=/root/.cache/go-build \
     --mount=type=cache,target=/go/pkg/mod \
     go build -trimpath -ldflags='-s -w -buildid=' -o /out/aurora .
 
-# ---- 阶段 2: 运行镜像(distroless,~2MB,无 shell 更安全)----
+# ---- 阶段 2: 运行镜像(distroless,~2MB,无 shell更安全)----
 FROM gcr.io/distroless/static-debian12:nonroot
+# 应用使用相对路径读取凭据文件；固定到 / 以匹配 Docker Compose 的根目录挂载。
+WORKDIR /
 COPY --from=build /out/aurora /aurora
 EXPOSE 8080
 USER nonroot:nonroot