FROM alpine:3.19

ARG PB_VERSION=0.36.8

RUN apk add --no-cache curl unzip ca-certificates \
    && curl -fsSL --retry 5 --retry-all-errors --retry-delay 3 \
       "https://github.com/pocketbase/pocketbase/releases/download/v${PB_VERSION}/pocketbase_${PB_VERSION}_linux_arm64.zip" \
       -o /tmp/pocketbase.zip \
    && unzip /tmp/pocketbase.zip -d /tmp/pb \
    && chmod +x /tmp/pb/pocketbase \
    && mv /tmp/pb/pocketbase /usr/local/bin/pocketbase \
    && rm -rf /tmp/pocketbase.zip /tmp/pb

RUN adduser -D -u 1001 pbuser
WORKDIR /app
RUN mkdir -p /app/pb_data && chown -R pbuser:pbuser /app
USER pbuser

COPY --chown=pbuser:pbuser pb_migrations/ ./pb_migrations/
COPY --chown=pbuser:pbuser pb_hooks/ ./pb_hooks/

EXPOSE 8090

CMD ["pocketbase", "serve", \
     "--http=0.0.0.0:8090", \
     "--dir=/app/pb_data", \
     "--migrationsDir=/app/pb_migrations", \
     "--hooksDir=/app/pb_hooks"]