# syntax=docker/dockerfile:1

ARG RUNTIME_BASE_IMAGE=node:22-bookworm-slim

FROM node:22-bookworm-slim AS build

WORKDIR /app
ENV PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD=1

COPY package.json package-lock.json ./
COPY apps/server/package.json apps/server/package.json
COPY apps/web/package.json apps/web/package.json
COPY packages/core/package.json packages/core/package.json
COPY packages/application/package.json packages/application/package.json
COPY packages/markdown-echarts/package.json packages/markdown-echarts/package.json
COPY packages/preview-engine/package.json packages/preview-engine/package.json
COPY packages/renderer/package.json packages/renderer/package.json
RUN npm ci

COPY tsconfig.base.json ./
COPY apps ./apps
COPY packages ./packages
COPY logos ./logos
RUN npm run build -w @md-to-pdf/markdown-echarts \
    && npm run build -w @md-to-pdf/core \
    && npm run build -w @md-to-pdf/renderer \
    && npm run build -w @md-to-pdf/application \
    && npm run build -w @md-to-pdf/preview-engine \
    && npm run build -w @md-to-pdf/web \
    && npm run build -w @md-to-pdf/server

FROM node:22-bookworm-slim AS production-dependencies

WORKDIR /app
ENV PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD=1

COPY package.json package-lock.json ./
COPY apps/server/package.json apps/server/package.json
COPY apps/web/package.json apps/web/package.json
COPY packages/core/package.json packages/core/package.json
COPY packages/application/package.json packages/application/package.json
COPY packages/markdown-echarts/package.json packages/markdown-echarts/package.json
COPY packages/preview-engine/package.json packages/preview-engine/package.json
COPY packages/renderer/package.json packages/renderer/package.json
RUN npm ci --omit=dev --workspace @md-to-pdf/server --include-workspace-root

FROM ${RUNTIME_BASE_IMAGE} AS runtime

USER root
ARG RUNTIME_BASE_IMAGE
ARG REUSE_PLAYWRIGHT_RUNTIME=0
RUN if [ "${REUSE_PLAYWRIGHT_RUNTIME}" = "1" ]; then \
      echo "Reusing the Playwright runtime from ${RUNTIME_BASE_IMAGE}"; \
    else \
      apt-get update \
      && apt-get install -y --no-install-recommends \
        nginx \
        fonts-noto-cjk \
        fonts-noto-color-emoji \
      && rm -rf /var/lib/apt/lists/* \
      && groupadd --system pwuser \
      && useradd --system --create-home --gid pwuser --shell /bin/bash pwuser; \
    fi

WORKDIR /app

COPY --chown=pwuser:pwuser package.json package-lock.json ./
COPY --chown=pwuser:pwuser apps/server/package.json apps/server/package.json
COPY --chown=pwuser:pwuser apps/web/package.json apps/web/package.json
COPY --chown=pwuser:pwuser packages/core/package.json packages/core/package.json
COPY --chown=pwuser:pwuser packages/application/package.json packages/application/package.json
COPY --chown=pwuser:pwuser packages/markdown-echarts/package.json packages/markdown-echarts/package.json
COPY --chown=pwuser:pwuser packages/preview-engine/package.json packages/preview-engine/package.json
COPY --chown=pwuser:pwuser packages/renderer/package.json packages/renderer/package.json
COPY --chown=pwuser:pwuser --from=production-dependencies /app/node_modules ./node_modules
ENV PLAYWRIGHT_BROWSERS_PATH=/ms-playwright
RUN if [ "${REUSE_PLAYWRIGHT_RUNTIME}" = "1" ]; then \
      test -x /ms-playwright/chromium-*/chrome-linux/chrome \
      || test -x /ms-playwright/chromium-*/chrome-linux64/chrome; \
    else \
      npx playwright install --with-deps chromium; \
    fi \
    && chown -R pwuser:pwuser /ms-playwright

COPY --chown=pwuser:pwuser --from=build /app/apps/server/dist ./apps/server/dist
COPY --chown=pwuser:pwuser --from=build /app/apps/web/dist ./apps/web/dist
COPY --chown=pwuser:pwuser --from=build /app/packages/core/dist ./packages/core/dist
COPY --chown=pwuser:pwuser --from=build /app/packages/application/dist ./packages/application/dist
COPY --chown=pwuser:pwuser --from=build /app/packages/markdown-echarts/dist ./packages/markdown-echarts/dist
COPY --chown=pwuser:pwuser --from=build /app/packages/preview-engine/dist ./packages/preview-engine/dist
COPY --chown=pwuser:pwuser --from=build /app/packages/renderer/dist ./packages/renderer/dist
COPY --chown=pwuser:pwuser themes ./themes
COPY deploy/nginx.conf /etc/nginx/nginx.conf
COPY --chown=pwuser:pwuser deploy/entrypoint.sh /app/deploy/entrypoint.sh

RUN chmod 0755 /app/deploy/entrypoint.sh

ENV HOST=127.0.0.1 \
    PORT=3001 \
    PDF_RENDER_ORIGIN=http://127.0.0.1:8080 \
    PDF_CONCURRENCY=1 \
    PDF_MAX_QUEUE=4 \
    PDF_TIMEOUT_MS=120000

USER pwuser

EXPOSE 8080

ENTRYPOINT ["/app/deploy/entrypoint.sh"]