# Use Node.js runtime for production
FROM node:22.23.4-slim

# Install required packages:
# - wget for healthcheck, curl/bash for bun install, openssl for prisma
# - fontconfig + fonts-dejavu-core so sharp/librsvg can render text in the
#   browser-automation screenshot overlay (node:*-slim ships with zero fonts)
RUN apt-get update && apt-get install -y --no-install-recommends \
    wget curl openssl fontconfig fonts-dejavu-core \
  && rm -rf /var/lib/apt/lists/*

WORKDIR /app

# Copy package.json and pre-installed node_modules from buildspec
COPY package.json ./
COPY node_modules ./node_modules

# Copy built application and prisma files
COPY . .

# Set environment variables
ENV NODE_ENV=production
ENV PORT=3333

# Create a non-root user for security
RUN groupadd --system nestjs && useradd --system --gid nestjs nestjs \
  && chown -R nestjs:nestjs /app

USER nestjs

# Expose the port the app runs on
EXPOSE 3333

# Health check
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
  CMD wget --no-verbose --tries=1 --spider http://localhost:3333/v1/health || exit 1

# Start the application
CMD ["node", "src/main.js"]