# Multi-stage build for optimal production image

# Stage 1: Dependencies
FROM node:20-alpine AS deps
RUN apk add --no-cache libc6-compat
WORKDIR /app

# Copy package files
COPY package.json package-lock.json ./

# Install all dependencies (including dev dependencies needed for build)
ENV NODE_ENV=development
RUN npm ci

# Stage 2: Builder
FROM node:20-alpine AS builder
WORKDIR /app

# Copy dependencies from deps stage
COPY --from=deps /app/node_modules ./node_modules
COPY . .

# Set environment variable for build (optional - can be overridden at runtime)
ARG NEXT_PUBLIC_GEMINI_API_KEY
ENV NEXT_PUBLIC_GEMINI_API_KEY=$NEXT_PUBLIC_GEMINI_API_KEY

# Build Next.js application with standalone output
ENV NEXT_TELEMETRY_DISABLED=1
RUN npm run build

# Stage 3: Runner
FROM node:20-alpine AS runner
WORKDIR /app

ENV NODE_ENV=production
ENV NEXT_TELEMETRY_DISABLED=1

# Optional: OCI-Labels für GHCR
LABEL org.opencontainers.image.source="https://github.com/stefan-kp/chess_tutor"
LABEL org.opencontainers.image.title="Chess Tutor"
LABEL org.opencontainers.image.description="AI-based chess tutor using Stockfish and Gemini"

# Create non-root user for security
RUN addgroup --system --gid 1001 nodejs
RUN adduser --system --uid 1001 nextjs

# Copy necessary files from builder
# Note: Copy public first, then standalone (which may have a minimal public/)
COPY --from=builder /app/.next/standalone ./
COPY --from=builder /app/.next/static ./.next/static
# Explicitly copy all public assets (standalone doesn't include everything)
COPY --from=builder /app/public ./public

# Copy scripts and node_modules needed for Wikipedia/opening setup
COPY --from=builder /app/scripts ./scripts
COPY --from=builder /app/node_modules ./node_modules
COPY --from=builder /app/package.json ./package.json

# Install Python and dependencies for tactical puzzles setup
# Users can run: docker exec chess-tutor python3 scripts/setup_tactical_puzzles.py
RUN apk add --no-cache python3 py3-pip zstd && \
    pip3 install --break-system-packages python-chess

# Copy entrypoint script and make executable
COPY scripts/docker-entrypoint.sh /usr/local/bin/
RUN chmod +x /usr/local/bin/docker-entrypoint.sh

# Create directories for user-generated data
RUN mkdir -p /app/fixtures/tactics /app/downloads && \
    chown -R nextjs:nodejs /app/fixtures /app/downloads

# Set ownership to non-root user
RUN chown -R nextjs:nodejs /app

# Switch to non-root user
USER nextjs

# Expose port 3050
EXPOSE 3050

# Set port environment variable
ENV PORT=3050
ENV HOSTNAME="0.0.0.0"

# Health check
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
  CMD node -e "require('http').get('http://localhost:3050/api/health', (r) => {process.exit(r.statusCode === 200 ? 0 : 1)})" || exit 1

# Use entrypoint for initialization
ENTRYPOINT ["/usr/local/bin/docker-entrypoint.sh"]

# Start the application
CMD ["node", "server.js"]