# syntax=docker/dockerfile:1

FROM rust:1.85-bookworm AS builder

WORKDIR /build

COPY .cargo ./.cargo
COPY Cargo.toml Cargo.lock ./
COPY migrations ./migrations
COPY src ./src

RUN --mount=type=cache,id=teaching-feedback-cargo-registry,target=/usr/local/cargo/registry,sharing=locked \
    --mount=type=cache,id=teaching-feedback-cargo-git,target=/usr/local/cargo/git,sharing=locked \
    cargo fetch --locked

RUN --mount=type=cache,id=teaching-feedback-cargo-registry,target=/usr/local/cargo/registry,sharing=locked \
    --mount=type=cache,id=teaching-feedback-cargo-git,target=/usr/local/cargo/git,sharing=locked \
    --mount=type=cache,id=teaching-feedback-cargo-target,target=/build/target,sharing=locked \
    cargo build --locked --release \
    --bin teaching-feedback-api \
    --bin migrate \
    --bin migrate-user-owner \
    && mkdir -p /build/output \
    && cp target/release/teaching-feedback-api /build/output/teaching-feedback-api \
    && cp target/release/migrate /build/output/migrate \
    && cp target/release/migrate-user-owner /build/output/migrate-user-owner

FROM debian:bookworm-slim AS runtime

ARG DEBIAN_MIRROR=http://deb.debian.org

RUN sed -i "s|http://deb.debian.org|${DEBIAN_MIRROR}|g" /etc/apt/sources.list.d/debian.sources \
    && apt-get update \
    && apt-get install -y --no-install-recommends ca-certificates curl \
    && rm -rf /var/lib/apt/lists/* \
    && groupadd --system --gid 10001 app \
    && useradd --system --uid 10001 --gid app --home-dir /nonexistent --shell /usr/sbin/nologin app \
    && install -d -o app -g app /data/audio

COPY --from=builder /build/output/teaching-feedback-api /usr/local/bin/teaching-feedback-api
COPY --from=builder /build/output/migrate /usr/local/bin/migrate
COPY --from=builder /build/output/migrate-user-owner /usr/local/bin/migrate-user-owner

ENV HOST=0.0.0.0 \
    PORT=8080 \
    AUDIO_STORAGE_DIR=/data/audio \
    RUST_LOG=info

USER app

EXPOSE 8080

HEALTHCHECK --interval=15s --timeout=5s --start-period=30s --retries=10 \
    CMD ["curl", "-fsS", "http://127.0.0.1:8080/health"]

CMD ["teaching-feedback-api"]
