# BetterFrame server image — Node 24 + native deps for argon2/sqlite.
# Trixie base (Debian 13, latest stable) — matches the host distro we
# recommend in deploy/README.md.
FROM node:24-trixie-slim AS builder

WORKDIR /app

# Build deps for argon2 + bsb-plugin-cli
RUN apt-get update && apt-get install -y --no-install-recommends \
    build-essential python3 \
    && rm -rf /var/lib/apt/lists/*

COPY package.json package-lock.json ./
COPY server/package.json ./server/
COPY tsconfig.base.json ./
RUN npm ci && npm rebuild argon2

COPY server ./server

# Run BSB build — extracts schemas + compiles TS + generates plugin manifests
WORKDIR /app/server
RUN npm run build

# ---- Runtime image ----
FROM node:24-trixie-slim

ARG BF_SERVER_VERSION=

# ffmpeg for camera snapshot capture (optional but needed for /admin/entities/:id/snapshot)
RUN apt-get update && apt-get install -y --no-install-recommends \
    ca-certificates ffmpeg wget \
    && rm -rf /var/lib/apt/lists/*

RUN useradd -m -d /var/lib/betterframe -s /bin/false betterframe

WORKDIR /app

COPY --from=builder /app/node_modules ./node_modules
COPY --from=builder /app/server ./server
COPY --from=builder /app/tsconfig.base.json ./
COPY --from=builder /app/package.json ./

# Default sec-config baked into image. BF_* env vars in compose override at
# runtime (see shared/env-overrides.ts). No host bind mount needed.
COPY deploy/docker/sec-config.yaml /app/server/sec-config.yaml

RUN mkdir -p /var/lib/betterframe && chown betterframe:betterframe /var/lib/betterframe
VOLUME /var/lib/betterframe

EXPOSE 18080 18081 18082

USER betterframe
WORKDIR /app/server

ENV NODE_OPTIONS=--import=tsx
ENV BF_SERVER_VERSION=${BF_SERVER_VERSION}

CMD ["node", "--import", "tsx", "/app/node_modules/@bsb/base/lib/scripts/bsb-plugin-cli.js", "start"]