FROM postgres:18-alpine@sha256:10a5c69a83035ab5239f5620d708520e8b28f5aa1f2b20143e6024532edadfb5

ENV PGCONNECT_TIMEOUT=10

COPY --chmod=0444 scripts/umami-retention.sql /app/umami-retention.sql

# libpq reads PGHOST, PGPORT, PGDATABASE, PGUSER, and PGPASSWORD directly.
# Keeping the connection out of a shell avoids both interpolation mistakes and
# accidental command-line exposure of a database URL.
CMD ["psql", "-X", "--set=ON_ERROR_STOP=1", "--file=/app/umami-retention.sql"]