# syntax=docker/dockerfile:1.7
# pewpewstudio images, built on nh3-dev from a clean `git archive` of vh/pewpewstudio (see ../README.md).
#   api: the FastAPI backend (core.api), venv built with uv; hamr is a git dependency over gitea SSH (BuildKit --ssh).
#   web: Caddy serving the SPA (web/dist) and proxying /api/* to the api with the prefix stripped (Caddyfile mounted).

FROM python:3.12-slim-bookworm AS build
RUN apt-get update && apt-get install -y --no-install-recommends git openssh-client build-essential \
 && rm -rf /var/lib/apt/lists/* && pip install --no-cache-dir uv==0.13.0
# gitea's SSH is 10.250.50.70:222; the lockfile names ssh://git@gitea.phasefinal.com/vh/hamr.git, as nh3-dev's ssh config maps it
RUN install -d -m 700 /root/.ssh \
 && printf 'Host gitea.phasefinal.com\n  HostName 10.250.50.70\n  Port 222\n  User git\n' > /root/.ssh/config \
 && ssh-keyscan -p 222 10.250.50.70 > /root/.ssh/known_hosts 2>/dev/null
ENV UV_LINK_MODE=copy UV_PYTHON_DOWNLOADS=never UV_PROJECT_ENVIRONMENT=/app/.venv
WORKDIR /app
COPY . /app
RUN --mount=type=ssh uv sync --frozen --no-dev && uv --version > /app/.uv-version

FROM python:3.12-slim-bookworm AS api
COPY --from=build /app /app
RUN install -d -o 1000 -g 1000 /state /state/assets /config
WORKDIR /app
ENV PATH=/app/.venv/bin:$PATH PYTHONUNBUFFERED=1
USER 1000:1000
EXPOSE 8000
CMD ["python", "-c", "import uvicorn; from core.api.app import create_app; from core.api.config import ApiConfig; uvicorn.run(create_app(ApiConfig.from_env()), host='0.0.0.0', port=8000)"]

FROM oven/bun:1.3 AS webbuild
WORKDIR /web
COPY web/ /web/
RUN bun install --frozen-lockfile && bun run build

FROM caddy:2-alpine AS web
COPY --from=webbuild /web/dist /srv