Set minimum tls version to 1.3 and statically compile to avoid glibc …

…error (#187)
jainishshah17 · Aug 29, 2023 · a5c4554 · a5c4554
1 parent 7dacca7
commit a5c4554
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/Dockerfile b/Dockerfile
@@ -8,7 +8,7 @@ WORKDIR /src/jainishshah17/tugger/
 COPY ./ /src/jainishshah17/tugger/
 
 # Build microservices
-RUN cd cmd/tugger && go install
+RUN cd cmd/tugger && CGO_ENABLED=0 go install -ldflags="-extldflags=-static"
 
 # Runnable image
 FROM gcr.io/distroless/base-debian11

diff --git a/cmd/tugger/main.go b/cmd/tugger/main.go
@@ -96,6 +96,7 @@ func main() {
 		Addr: fmt.Sprintf(":%d", listenPort),
 		TLSConfig: &tls.Config{
 			ClientAuth: tls.NoClientCert,
+			MinVersion: tls.VersionTLS13,
 		},
 	}
 	log.Fatal(s.ListenAndServeTLS(tlsCertFile, tlsKeyFile))