# syntax=docker/dockerfile:1.7
FROM node:22-alpine@sha256:c610fcdfb1d5b4740dd70c284ed3cb16bb857e0f7166196e36a5501df7a3aa32 AS dependencies-base
WORKDIR /app
RUN apk add --no-cache python3 make g++
COPY package.json package-lock.json ./
# Keep the image build on the same npm major that produces and validates the
# nested dependency overrides in package-lock.json. Node 22's bundled npm is
# older and rejects this otherwise valid lockfile during `npm ci`.
RUN npm install --global npm@11.16.0

FROM dependencies-base AS build
ARG DOCKDECK_BUILD_VERSION=0.1.0
ARG DOCKDECK_BUILD_REVISION=development
ARG DOCKDECK_BUILD_DATE=1970-01-01T00:00:00.000Z
RUN npm ci
COPY . .
RUN DOCKDECK_BUILD_VERSION="$DOCKDECK_BUILD_VERSION" \
    DOCKDECK_BUILD_REVISION="$DOCKDECK_BUILD_REVISION" \
    DOCKDECK_BUILD_DATE="$DOCKDECK_BUILD_DATE" \
    npm run build

# Installing the production dependency graph from the lockfile avoids mutating
# a full dependency tree with `npm prune`. Concurrent BuildKit validations had
# both stalled in that prune operation, while this stage remains reproducible.
FROM dependencies-base AS production-dependencies
RUN npm ci --omit=dev

FROM node:22-alpine@sha256:c610fcdfb1d5b4740dd70c284ed3cb16bb857e0f7166196e36a5501df7a3aa32 AS runtime
ARG DOCKDECK_BUILD_VERSION=0.1.0
ARG DOCKDECK_BUILD_REVISION=development
ARG DOCKDECK_BUILD_DATE=1970-01-01T00:00:00.000Z
ARG DOCKDECK_BUILD_SOURCE=jens/dockdeck
LABEL org.opencontainers.image.version="$DOCKDECK_BUILD_VERSION" \
      org.opencontainers.image.revision="$DOCKDECK_BUILD_REVISION" \
      org.opencontainers.image.created="$DOCKDECK_BUILD_DATE" \
      org.opencontainers.image.source="$DOCKDECK_BUILD_SOURCE"
ENV NODE_ENV=production \
    HOST=0.0.0.0 \
    PORT=3000 \
    DATABASE_PATH=/data/dockdeck.db
WORKDIR /app
RUN apk add --no-cache su-exec && \
    addgroup -S dockdeck && \
    adduser -S -G dockdeck dockdeck && \
    mkdir -p /data /host-proc /unraid-icons-cache && \
    chown dockdeck:dockdeck /data /unraid-icons-cache
COPY --from=build --chown=dockdeck:dockdeck /app/package.json ./package.json
COPY --from=production-dependencies --chown=dockdeck:dockdeck /app/node_modules ./node_modules
COPY --from=build --chown=dockdeck:dockdeck /app/dist ./dist
COPY docker-entrypoint.sh /usr/local/bin/dockdeck-entrypoint
RUN chmod 0755 /usr/local/bin/dockdeck-entrypoint
EXPOSE 3000
HEALTHCHECK --interval=30s --timeout=3s --start-period=10s --retries=3 CMD wget -qO- http://127.0.0.1:3000/api/health >/dev/null || exit 1
ENTRYPOINT ["dockdeck-entrypoint"]
CMD ["node", "dist/server/index.js"]