# syntax=docker/dockerfile:1

FROM node:22-alpine AS deps
WORKDIR /app
COPY package.json package-lock.json ./
RUN npm ci

FROM node:22-alpine AS builder
WORKDIR /app
ENV NEXT_TELEMETRY_DISABLED=1
COPY --from=deps /app/node_modules ./node_modules
COPY . .
RUN npx prisma generate && npm run build

# Prisma CLI + tsx for the startup migrate/seed step, isolated in their own
# tree so they don't interfere with the traced standalone node_modules.
FROM node:22-alpine AS tooling
WORKDIR /tooling
# bcryptjs is bundled into the server chunks by the standalone build, so the
# seed script can't resolve it from the app tree — provide it here instead.
RUN npm install --no-package-lock prisma@6 tsx@4 bcryptjs@3

FROM node:22-alpine AS runner
WORKDIR /app
ENV NODE_ENV=production
ENV NEXT_TELEMETRY_DISABLED=1
ENV PORT=3000
ENV HOSTNAME=0.0.0.0
RUN apk add --no-cache openssl && \
    addgroup -S nodejs && adduser -S nextjs -G nodejs
COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
COPY --from=builder --chown=nextjs:nodejs /app/public ./public
COPY --from=builder --chown=nextjs:nodejs /app/prisma ./prisma
COPY --from=tooling --chown=nextjs:nodejs /tooling ./tooling
COPY --chown=nextjs:nodejs docker-entrypoint.sh ./
USER nextjs
EXPOSE 3000
CMD ["sh", "./docker-entrypoint.sh"]