# syntax=docker/dockerfile:1@sha256:4edf897a3ffa55b89f906fc8cc78afdb3f1834cc9c7083565e611a8a7d5fe99e
# Stellarium for Unraid on LinuxServer.io's baseimage-selkies, streamed to the
# browser as H.264 video. Stellarium is a real-time OpenGL planetarium, a
# continuously rendered sky you pan, zoom and time-scrub, which is the kind of
# interactive workload that stutters over noVNC and stays smooth as video.
#
# The base is Debian trixie, which carries `stellarium` in main for amd64 and
# arm64, so apt is the simplest source and brings trixie's security updates
# along.

ARG BASE_TAG=debiantrixie@sha256:d5e900e9dbc7e0ec830758355cbb80f0b773ce55da82f59e7785298a510bc0f6
FROM ghcr.io/linuxserver/baseimage-selkies:${BASE_TAG}

LABEL maintainer="junkerderprovinz"
LABEL org.opencontainers.image.title="stellarium"
LABEL org.opencontainers.image.description="Stellarium for Unraid with a Selkies web desktop: the open-source planetarium in your browser, no VNC client"
LABEL org.opencontainers.image.source="https://github.com/junkerderprovinz/stellarium"
LABEL org.opencontainers.image.licenses="AGPL-3.0-only"
LABEL org.opencontainers.image.vendor="junkerderprovinz"

# TITLE feeds the PWA manifest; SELKIES_UI_TITLE is the visible tab/sidebar
# title of the Selkies web client. Selkies will not start with basic auth on and
# no password, so SELKIES_ENABLE_BASIC_AUTH=false keeps the no-login default;
# the base's nginx still enforces HTTP basic auth once a real
# CUSTOM_USER/PASSWORD is set.
#
# RESTART_APP=true turns on the base image's svc-watchdog, which runs the
# openbox autostart again whenever the application disappears; otherwise
# closing Stellarium leaves an empty black desktop until the container
# restarts, since openbox keeps running on its own. The watchdog finds the
# process by matching the autostart command line, which is why
# rootfs/defaults/autostart does not `exec` the launch.
ENV TITLE="Stellarium" \
    SELKIES_UI_TITLE="Stellarium" \
    SELKIES_ENABLE_BASIC_AUTH="false" \
    RESTART_APP="true"

# At the DPI Selkies hands a HiDPI browser, Stellarium scales its panels but
# draws the sky into a quarter of the window and leaves the rest black.
# Streaming every browser at its CSS size with the DPI fixed at 96 keeps the
# whole window drawn at one consistent size on any display. HiDPI can still be
# switched on per browser in the Selkies sidebar.
ENV SELKIES_USE_CSS_SCALING="true" \
    SELKIES_SCALING_DPI="96"

# The `stellarium` package pulls its own Qt dependency chain. On top of that:
#   * mesa DRI drivers (libgl1-mesa-dri) so the sky renders via llvmpipe when no
#     GPU is present (the base renders on the GPU when one is); Stellarium is a
#     real-time OpenGL app, so this software-GL fallback is what makes it work
#     on a GPU-less Unraid host,
#   * libglu1-mesa (GLU) + mesa-utils (glxinfo, used to sanity-check GL),
#   * dbus-x11 for the dbus-launch in the openbox autostart,
#   * fontconfig + Noto/DejaVu so star/constellation/UI labels render (missing
#     fonts show as blank boxes), incl. CJK for localized sky-culture names,
#     plus locales.
RUN set -eux; \
    apt-get update; \
    DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
        stellarium \
        libgl1-mesa-dri libglu1-mesa mesa-utils \
        dbus-x11 \
        fontconfig \
        fonts-noto fonts-noto-cjk fonts-noto-color-emoji \
        fonts-dejavu fonts-dejavu-core \
        locales coreutils sed; \
    fc-cache -f >/dev/null 2>&1 || true; \
    apt-get clean; \
    rm -rf /var/lib/apt/lists/*

# The base serves the web client without a cache header, so browsers keep the
# page for days and show a black "connecting" screen while the container is
# stopped. no-cache makes every load ask the container first.
RUN set -eux; \
    conf=/defaults/default.conf; \
    grep -q 'location SUBFOLDER {' "$conf"; \
    sed -i 's|^\( *\)location SUBFOLDER {|&\n\1  add_header Cache-Control "no-cache" always;|' "$conf"

COPY rootfs/ /

# rootfs/ ships svc-xorg/dependencies.d/init-dpi so the DPI oneshot settles
# the DPI before Xvfb starts. If a base bump renamed that
# service, the COPY above would create /etc/s6-overlay/s6-rc.d/svc-xorg as a
# service directory with a dependency and no `type` file. s6-rc-compile would
# then abort in stage 2 and every container exit at boot while the build stayed
# green, so the failure would only show up in users' logs. Checking for the
# base's own `type` file turns that into a build error instead.
RUN set -eux; \
    t=/etc/s6-overlay/s6-rc.d/svc-xorg/type; \
    [ -f "$t" ] || { echo "ERROR: $t missing, the selkies base renamed or dropped svc-xorg; re-point rootfs/etc/s6-overlay/s6-rc.d/svc-xorg/dependencies.d/init-dpi at the new service"; exit 1; }; \
    echo "stellarium: dpi oneshot ordered before svc-xorg"

# Init-log banner: single source at .github/assets/banner-raw.txt (CR stripped
# so a Windows checkout can't break it). Also blank the base's own adduser
# branding banner so the log shows only our print-banner.sh block.
COPY .github/assets/banner-raw.txt /usr/local/share/banner-raw.txt
RUN tr -d '\r' < /usr/local/share/banner-raw.txt > /usr/local/share/banner.txt; \
    rm -f /usr/local/share/banner-raw.txt; \
    : > /etc/s6-overlay/s6-rc.d/init-adduser/branding 2>/dev/null || true

# CA/PWA icon shown in the Selkies web client tab + sidebar.
COPY .github/assets/icon.png /usr/share/selkies/www/icon.png

RUN chmod +x /usr/local/bin/print-banner.sh \
             /etc/s6-overlay/s6-rc.d/init-dpi/run \
             /etc/s6-overlay/s6-rc.d/init-stellarium/run \
             /etc/s6-overlay/s6-rc.d/svc-stellarium-ready/run \
             /defaults/autostart \
             /defaults/startwm.sh

EXPOSE 3001
VOLUME /config