FROM node:22-alpine AS builder

WORKDIR /app

COPY package.json package-lock.json ./
RUN npm ci

COPY . .
RUN npm run build

FROM node:22-alpine AS server-runtime

WORKDIR /app

ENV NODE_ENV=production
ENV SOCKET_SERVER_PORT=31873

COPY package.json package-lock.json ./
RUN npm ci --omit=dev

COPY server ./server
COPY src/services/deckRegistration.js ./src/services/deckRegistration.js

EXPOSE 31873

HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
  CMD node -e "fetch('http://127.0.0.1:31873/health').then((response) => { if (!response.ok) process.exit(1) }).catch(() => process.exit(1))"

CMD ["node", "server/index.js"]

FROM nginx:1.27-alpine AS runtime

RUN adduser -D -H -u 1000 -G wheel cardreader \
    && sed -i 's/user  nginx;/user  cardreader wheel;/' /etc/nginx/nginx.conf

COPY docker/nginx.conf /etc/nginx/conf.d/default.conf
COPY --from=builder /app/dist /usr/share/nginx/html
RUN chmod -R a+rX /usr/share/nginx/html

EXPOSE 80

HEALTHCHECK --interval=30s --timeout=3s --start-period=10s --retries=3 \
  CMD wget --quiet --tries=1 --spider http://127.0.0.1/ || exit 1
