# syntax=docker/dockerfile:1.7

# ─── Stage 1: web build ───
FROM registry.jerryyan.top/library/node:22-alpine AS web
WORKDIR /web
RUN npm config set registry https://registry.npmmirror.com
COPY web/package.json web/pnpm-lock.yaml* ./
RUN corepack enable && (pnpm install --frozen-lockfile || pnpm install)
COPY web .
RUN pnpm build

# ─── Stage 2: go build ───
FROM registry.jerryyan.top/library/golang:1.25-alpine AS go
WORKDIR /src
RUN sed -i 's/dl-cdn.alpinelinux.org/mirrors.aliyun.com/g' /etc/apk/repositories \
    && apk add --no-cache git
ENV GOPROXY=https://goproxy.cn,direct
COPY go.mod go.sum ./
RUN go mod download
COPY . .
COPY --from=web /web/dist/. ./cmd/server/web/dist/
RUN CGO_ENABLED=0 GOOS=linux go build -trimpath -ldflags='-s -w' -o /out/server ./cmd/server

# ─── Stage 3: runtime ───
FROM registry.jerryyan.top/library/alpine:3.20
RUN sed -i 's/dl-cdn.alpinelinux.org/mirrors.aliyun.com/g' /etc/apk/repositories \
    && apk add --no-cache ca-certificates tzdata && \
    addgroup -S app && adduser -S app -G app
WORKDIR /app
COPY --from=go /out/server /app/server
COPY migrations /app/migrations
USER app
EXPOSE 8080
ENTRYPOINT ["/app/server"]