From 3154224f68f9e806c18fbf561a5607dd118faf3d Mon Sep 17 00:00:00 2001
From: anti <samuel@securejump.cl>
Date: Sun, 10 May 2026 01:05:00 -0400
Subject: [PATCH] fix(docker): hoist ARG BASE_IMAGE before first FROM so it
 scopes to all stages

---
 decnet/templates/http/Dockerfile  | 3 ++-
 decnet/templates/https/Dockerfile | 3 ++-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/decnet/templates/http/Dockerfile b/decnet/templates/http/Dockerfile
index cfdd9a4b..b1496396 100644
--- a/decnet/templates/http/Dockerfile
+++ b/decnet/templates/http/Dockerfile
@@ -1,10 +1,11 @@
+ARG BASE_IMAGE=debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252
+
 FROM caddy:2-builder AS caddy-build
 COPY _caddy_modules/decnetfp /src/decnetfp
 RUN xcaddy build \
     --with github.com/decnet/caddy-fp=/src/decnetfp \
     --output /usr/bin/caddy
 
-ARG BASE_IMAGE=debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252
 FROM ${BASE_IMAGE}
 
 COPY --from=caddy-build /usr/bin/caddy /usr/bin/caddy
diff --git a/decnet/templates/https/Dockerfile b/decnet/templates/https/Dockerfile
index 9028fa32..8db94ab5 100644
--- a/decnet/templates/https/Dockerfile
+++ b/decnet/templates/https/Dockerfile
@@ -1,10 +1,11 @@
+ARG BASE_IMAGE=debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252
+
 FROM caddy:2-builder AS caddy-build
 COPY _caddy_modules/decnetfp /src/decnetfp
 RUN xcaddy build \
     --with github.com/decnet/caddy-fp=/src/decnetfp \
     --output /usr/bin/caddy
 
-ARG BASE_IMAGE=debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252
 FROM ${BASE_IMAGE}
 
 COPY --from=caddy-build /usr/bin/caddy /usr/bin/caddy