# =============================================================================
# DCTS Server Dockerfile — Multi-stage Build (Server + Frontend Dashboard)
# =============================================================================

# ─── Stage 1: 前端静态资源构建 ────────────────────────────────────────────────
FROM node:22-alpine AS frontend-builder
WORKDIR /app/dashboard
COPY dashboard/package.json dashboard/package-lock.json* ./
RUN npm install
COPY dashboard/ ./
RUN npm run build

# ─── Stage 2: Rust 服务端编译 (Alpine/musl 静态编译) ─────────────────────────
FROM rust:1.80-alpine AS backend-builder

RUN apk add --no-cache musl-dev g++ make pkgconfig sqlite-dev

WORKDIR /app
ENV SKIP_DASHBOARD_BUILD=1

COPY Cargo.toml Cargo.lock ./
COPY crates/ ./crates/
COPY tools/ ./tools/
COPY --from=frontend-builder /app/dashboard/dist ./dashboard/dist

RUN cargo build --release -p server && \
    cp /app/target/release/server /usr/local/bin/dcts-server

# ─── Stage 3: 最小化生产运行镜像 ─────────────────────────────────────────────
FROM alpine:3.20

RUN apk add --no-cache ca-certificates tzdata sqlite

# 创建非 root 账号管理运行
RUN addgroup -g 65532 -S dcts && adduser -u 65532 -S dcts -G dcts

WORKDIR /app

COPY --from=backend-builder /usr/local/bin/dcts-server /app/
COPY --from=frontend-builder /app/dashboard/dist ./dashboard/dist
COPY config_dense.yaml ./

RUN mkdir -p /app/data /app/data/results /app/logs /app/assets && \
    chown -R dcts:dcts /app

USER dcts

EXPOSE 8090

ENV DCTS_PORT=8090
ENV DCTS_DB_PATH=/app/data/dcts.db
ENV DCTS_QUEUE_DB_PATH=/app/data/dcts_queue.db
ENV DCTS_RESULTS_DIR=/app/data/results
ENV DCTS_ASSETS_DIR=/app/assets

VOLUME ["/app/data", "/app/logs"]

HEALTHCHECK --interval=30s --timeout=10s --start-period=15s --retries=3 \
    CMD wget -q --spider http://localhost:8090/api/status || exit 1

ENTRYPOINT ["/app/dcts-server"]