# syntax=docker/dockerfile:1
FROM node:22-bookworm-slim AS admin
WORKDIR /src/web/admin
COPY web/admin/package*.json ./
RUN npm ci
COPY web/admin/ ./
RUN npm run build

FROM node:22-bookworm-slim AS mobile-check
WORKDIR /src/apps/mobile
ENV CI=1 EXPO_PUBLIC_API_URL=https://example.invalid
COPY apps/mobile/package*.json ./
RUN npm ci
COPY apps/mobile/ ./
RUN npm run typecheck && npm run test && npm run build

FROM golang:1.26.2-bookworm AS test
ENV GOPROXY=https://goproxy.cn,direct
WORKDIR /src
RUN apt-get update && apt-get install -y --no-install-recommends python3 && rm -rf /var/lib/apt/lists/*
COPY go.mod go.sum ./
RUN go mod download
COPY . .
COPY --from=admin /src/internal/adminui/dist ./internal/adminui/dist
RUN test -z "$(gofmt -l main.go internal)" && go vet ./...
CMD ["go", "test", "-race", "./..."]

FROM test AS build
RUN CGO_ENABLED=0 go build -trimpath -ldflags="-s -w" -o /out/veyra .

FROM debian:bookworm-slim AS runtime
RUN apt-get update && apt-get install -y --no-install-recommends ca-certificates tzdata python3 curl \
    && rm -rf /var/lib/apt/lists/* \
    && groupadd --gid 10001 veyra && useradd --uid 10001 --gid 10001 --no-create-home veyra
WORKDIR /app
ENV TZ=Asia/Shanghai HTTP_ADDR=0.0.0.0:8080 PYTHON_EXECUTABLE=python3 PYTHONDONTWRITEBYTECODE=1
COPY --from=build /out/veyra ./veyra
RUN mkdir logs && chown veyra:veyra logs
USER 10001:10001
EXPOSE 8080
HEALTHCHECK --interval=10s --timeout=5s --start-period=20s --retries=6 \
    CMD curl --fail --silent --output /dev/null http://127.0.0.1:8080/readyz || exit 1
ENTRYPOINT ["/app/veyra"]