# Build context is the repository root (workspace build):
#   docker build -f apps/api/Dockerfile .

FROM node:22.15-alpine AS build
WORKDIR /repo
RUN npm install -g pnpm@11
COPY pnpm-workspace.yaml pnpm-lock.yaml package.json tsconfig.base.json ./
COPY packages/shared ./packages/shared
COPY packages/plugin-sdk ./packages/plugin-sdk
COPY apps/api ./apps/api
COPY deploy/fonts ./deploy/fonts
RUN pnpm install --frozen-lockfile --filter @dorfteich/api... \
  && pnpm --filter @dorfteich/shared build \
  && pnpm --filter @dorfteich/plugin-sdk build \
  && pnpm --filter @dorfteich/api build \
  # Bake the self-hosted font catalog in so the PDF exporter can inline a
  # pond's fonts as base64 (ADR 0016). Same download as the web image; fails
  # the build if a family lacks license info.
  && FONTS_OUT=/repo/fonts node deploy/fonts/build-fonts.mjs \
  # Self-contained production bundle (prod deps only, incl. the prisma CLI
  # needed for migrate-on-start) at /out.
  && pnpm --filter @dorfteich/api deploy --prod --legacy /out \
  && cp -r apps/api/dist /out/dist \
  && cp -r /repo/fonts /out/fonts

FROM node:22.15-alpine
ARG APP_VERSION=0.0.0-dev
ENV NODE_ENV=production APP_VERSION=${APP_VERSION}
WORKDIR /app
COPY --from=build --chown=node:node /out /app
# Generate the Prisma client for this image's platform.
RUN node node_modules/prisma/build/index.js generate
# A fresh named volume mounted at /data/uploads or /data/plugins is created
# root-owned; pre-creating them here (Docker copies an image directory's
# ownership into a new volume on first mount) lets the non-root `node` user
# write to them.
RUN mkdir -p /data/uploads /data/plugins && chown -R node:node /data/uploads /data/plugins
USER node
EXPOSE 3000
HEALTHCHECK --interval=30s --timeout=3s --retries=3 \
  CMD node -e "fetch('http://127.0.0.1:'+(process.env.PORT||3000)+'/api/v1/healthz').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"
CMD ["node", "dist/main.js"]
