# Multi-stage Dockerfile for Nerd Monitor
# Optimized for Coolify CI/CD pipeline
# Build stage
FROM golang:1.23-alpine AS builder

WORKDIR /app

# Install build dependencies
RUN apk add --no-cache git make

# Copy go mod files
COPY go.mod go.sum ./

# Download dependencies
RUN go mod download

# Copy source code
COPY . .

# Generate Templ templates
RUN go run github.com/a-h/templ/cmd/templ@latest generate

# Build the server
RUN CGO_ENABLED=1 GOOS=linux GOARCH=amd64 go build -ldflags="-w -s" -o bin/nerd-monitor-server ./cmd/server

# Runtime stage
FROM alpine:latest

WORKDIR /app

# Install runtime dependencies
RUN apk add --no-cache ca-certificates tzdata

# Copy binary from builder
COPY --from=builder /app/bin/nerd-monitor-server /app/nerd-monitor-server

# Create non-root user for security
RUN addgroup -g 1000 nerdmonitor && adduser -D -u 1000 -G nerdmonitor nerdmonitor

# Change ownership
RUN chown -R nerdmonitor:nerdmonitor /app

# Switch to non-root user
USER nerdmonitor

# Expose port
EXPOSE 8080

# Health check
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
    CMD wget --no-verbose --tries=1 --spider http://localhost:8080/login || exit 1

# Default environment variables
ENV ADDR=0.0.0.0
ENV PORT=8080
ENV USERNAME=admin
ENV PASSWORD=admin

# Run the application
CMD ["/app/nerd-monitor-server", "-addr", "0.0.0.0", "-port", "8080", "-username", "admin", "-password", "admin"]