# syntax=docker/dockerfile:1

# ---------------------------------------------------------------------------
# Etape 1 : compilation du frontend React / Vite
# ---------------------------------------------------------------------------
FROM node:20-alpine AS frontend-build

WORKDIR /build

# Les dependances sont installees avant le code source pour profiter du cache.
COPY frontend/package.json frontend/package-lock.json ./
RUN npm ci --no-audit --no-fund

COPY frontend/ ./
RUN npm run build

# ---------------------------------------------------------------------------
# Etape 2 : dependances Python
# ---------------------------------------------------------------------------
FROM python:3.12-slim AS backend-deps

ENV PIP_NO_CACHE_DIR=1 \
    PIP_DISABLE_PIP_VERSION_CHECK=1

WORKDIR /install
COPY backend/requirements.txt ./
RUN pip install --prefix=/opt/python -r requirements.txt

# ---------------------------------------------------------------------------
# Etape 3 : image finale (un seul service : FastAPI sert l'API et le frontend)
# ---------------------------------------------------------------------------
FROM python:3.12-slim AS runtime

ENV PYTHONUNBUFFERED=1 \
    PYTHONDONTWRITEBYTECODE=1 \
    PATH="/opt/python/bin:$PATH" \
    PYTHONPATH="/opt/python/lib/python3.12/site-packages" \
    STATIC_DIR=/app/static \
    DATABASE_URL=sqlite:////app/data/openmind.db

# curl sert uniquement au healthcheck du conteneur.
RUN apt-get update \
    && apt-get install --no-install-recommends -y curl \
    && rm -rf /var/lib/apt/lists/*

# L'application ne tourne jamais en root.
RUN useradd --create-home --uid 10001 openmind

WORKDIR /app

COPY --from=backend-deps /opt/python /opt/python
COPY backend/app ./app
COPY backend/alembic.ini ./alembic.ini
COPY backend/migrations ./migrations
COPY docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh
COPY --from=frontend-build /build/dist ./static

RUN chmod +x /usr/local/bin/docker-entrypoint.sh

RUN mkdir -p /app/data && chown -R openmind:openmind /app

USER openmind
EXPOSE 8080

HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
    CMD curl -fsS http://127.0.0.1:8080/api/health || exit 1

# Les migrations sont appliquees par l'entrypoint, avant le demarrage d'uvicorn.
ENTRYPOINT ["/usr/local/bin/docker-entrypoint.sh"]
CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8080", "--proxy-headers"]