# syntax=docker/dockerfile:1.7

# --- Backend build ---
FROM golang:1.26 AS backend-builder
WORKDIR /app/backend
COPY backend/go.mod backend/go.sum ./
RUN go mod download
COPY backend/. ./
RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -ldflags "-s -w -X main.version=1.0.0" -o /kereru-forms ./cmd/kereru-forms

# --- Frontend build ---
FROM node:22 AS frontend-builder
WORKDIR /app/frontend
COPY frontend/package*.json ./
RUN npm ci
COPY frontend/. ./
COPY backend/openapi /app/backend/openapi
RUN npm run build

# --- Runtime ---
FROM alpine:3.20
RUN apk add --no-cache ca-certificates tzdata \
    && addgroup -g 10001 -S kereru \
    && adduser -u 10001 -S -G kereru kereru \
    && mkdir -p /data /app/static \
    && chown -R kereru:kereru /data /app
WORKDIR /app
ENV KERERU_LOG_LEVEL=info \
    KERERU_LOG_FORMAT=json \
    KERERU_ENVIRONMENT=production \
    KERERU_LISTEN_ADDR=0.0.0.0 \
    KERERU_PORT=8080 \
    KERERU_DB_DRIVER=sqlite \
    KERERU_DB_DSN="file:/data/kereru.db?_pragma=busy_timeout(5000)&_pragma=foreign_keys(1)" \
    KERERU_STATIC_DIR=/app/static \
    KERERU_CORS_ORIGINS="*"
COPY --from=backend-builder /kereru-forms /app/kereru-forms
COPY --from=frontend-builder /app/frontend/dist /app/static
VOLUME ["/data"]
EXPOSE 8080
USER kereru:kereru
ENTRYPOINT ["/app/kereru-forms"]
CMD ["--listen-addr", "0.0.0.0", "--port", "8080"]