ARG BASE_VERSION=15.1
FROM ghcr.io/daemonless/base-rcd:${BASE_VERSION}

ARG FREEBSD_ARCH=amd64
ARG PACKAGES="openjdk25-jre-headless mongodb70 snappyjava ca_root_nss"
ARG UPSTREAM_URL="https://fw-update.ui.com/api/firmware-latest?filter=eq~~product~~unifi-controller&filter=eq~~channel~~release"
ARG HEALTHCHECK_ENDPOINT="https://localhost:{{ ports[0].port }}/status"

ENV HEALTHCHECK_URL="${HEALTHCHECK_ENDPOINT}"

LABEL org.opencontainers.image.title="{{ title }}" \
    org.opencontainers.image.description="{{ description }}" \
    org.opencontainers.image.source="{{ repo_url }}" \
    org.opencontainers.image.url="{{ web_url }}" \
    org.opencontainers.image.documentation="https://help.ui.com/" \
    org.opencontainers.image.licenses="Proprietary" \
    org.opencontainers.image.vendor="daemonless" \
    org.opencontainers.image.authors="daemonless" \
{%- if ports %}
    io.daemonless.port="{{ ports[0].port }}" \
{%- endif %}
    io.daemonless.arch="${FREEBSD_ARCH}" \
{%- if mlock %}
    org.freebsd.jail.allow.mlock="required" \
{%- endif %}
    io.daemonless.category="{{ category }}" \
    io.daemonless.upstream-url="${UPSTREAM_URL}" \
    io.daemonless.upstream-jq='._embedded.firmware[0].version | sub("^v"; "") | split("+")[0]' \
    io.daemonless.healthcheck-url="${HEALTHCHECK_ENDPOINT}" \
    io.daemonless.packages="${PACKAGES}"

# Install dependencies (OpenJDK 25 JRE headless, MongoDB 7.0)
# snappyjava provides native FreeBSD snappy library (avoids bundled Linux lib)
RUN pkg update && \
    pkg install -y \
    ${PACKAGES} && \
    pkg clean -ay && \
    rm -rf /var/cache/pkg/* /var/db/pkg/repos/*

# Download and install UniFi from Ubiquiti
# Single fetch - uses same URL/sed as labels for version, extracts download URL
RUN mkdir -p /usr/local/share/java/unifi && \
    API_RESPONSE=$(fetch -qo - "${UPSTREAM_URL}") && \
    UNIFI_VERSION=$(echo "$API_RESPONSE" | jq -r '._embedded.firmware[0].version | sub("^v"; "") | split("+")[0]') && \
    UNIFI_URL=$(echo "$API_RESPONSE" | sed -n 's/.*"platform":"unix"[^}]*"href":"\([^"]*\)".*/\1\/data/p' | head -1) && \
    echo "Downloading UniFi ${UNIFI_VERSION} from ${UNIFI_URL}..." && \
    fetch -qo - "${UNIFI_URL}" | tar -xzf - -C /usr/local/share/java/unifi --strip-components=1 && \
    echo "${UNIFI_VERSION}" > /usr/local/share/java/unifi/version.txt && \
    mkdir -p /app && echo "${UNIFI_VERSION}" > /app/version

# Create config directory and configure UniFi to use system MongoDB
RUN mkdir -p /config /var/run/unifi && \
    rm -rf /usr/local/share/java/unifi/data && \
    ln -sf /config /usr/local/share/java/unifi/data && \
    echo "db.mongo.local=false" > /config/system.properties && \
    echo "db.mongo.uri=mongodb://127.0.0.1:27117/ace" >> /config/system.properties && \
    chown -R bsd:bsd /config /var/run/unifi /usr/local/share/java/unifi

# Copy service definition and init scripts
COPY root/ /
RUN chmod +x /daemonless/libexec/* /daemonless/init.d/*

# Make scripts executable
RUN chmod +x /healthz

# Set up s6 service links for unifi and mongodb

# UniFi ports:
# 8443  - Web UI (HTTPS)
# 8080  - Device inform
# 8843  - Guest portal HTTPS
# 8880  - Guest portal HTTP
# 6789  - Mobile throughput test
# 3478/udp - STUN
# 10001/udp - Device discovery
{%- if ports %}
EXPOSE {{ ports | map(attribute='port') | join(' ') }}
{%- endif %}
{%- if volumes %}
VOLUME {{ volumes | map(attribute='path') | join(' ') }}
{%- endif %}