# This file is inspired by https://github.com/vercel/next.js/blob/canary/examples/with-docker/Dockerfile

FROM node:24-alpine AS base

#-----------------------------------------
# STAGE 1: Build the Next.js project
#-----------------------------------------
FROM base AS builder

# Check https://github.com/nodejs/docker-node/tree/b4117f9333da4138b03a546ec926ef50a31506c3#nodealpine to understand why libc6-compat might be needed.
RUN apk add --no-cache libc6-compat

WORKDIR /app

# Copy monorepo root package files
COPY ./package.json ./package-lock.json ./

# Copy workspace package files
COPY ./web-app/package.json ./web-app/package-lock.json ./web-app/

# Install dependencies (workspaces)
RUN npm i && npm cache clean --force

# Copy web-app source code
COPY ./web-app ./web-app

# Build web-app workspace
RUN npm run build --workspace=web-app

#-----------------------------------------
# STAGE 3: Run the Next.js server
#-----------------------------------------
FROM gcr.io/distroless/nodejs20-debian12:nonroot AS production

WORKDIR /app

# making sure the production server does not use mock auth
ENV NODE_ENV=production

COPY --from=builder /app/web-app/public/* /app/public/
# this file is required for the pdfjs-dist package
COPY --from=builder /app/node_modules/pdfjs-dist/build/pdf.worker.min.mjs /app/public/pdf.worker.min.mjs

# Automatically leverage output traces to reduce image size
# https://nextjs.org/docs/advanced-features/output-file-tracing
COPY --from=builder --chown=nonroot:nonroot /app/web-app/.next/standalone ./
COPY --from=builder --chown=nonroot:nonroot /app/web-app/.next/static ./.next/static

USER nonroot

EXPOSE 3000

ENV PORT=3000

# server.js is created by next build from the standalone output
# https://nextjs.org/docs/pages/api-reference/next-config-js/output
CMD ["server.js"]