# syntax=docker/dockerfile:1
# API Fastify (apps/api). Contesto di build: radice del monorepo.
#   docker build -f apps/api/Dockerfile -t iti-technology/api .
# All'avvio applica le migrazioni (idempotenti), poi avvia il server.

ARG NODE_IMAGE=node:24-bookworm-slim

# --- Dipendenze (tutte, per compilare) ---
FROM ${NODE_IMAGE} AS deps
WORKDIR /repo
# Tutti i manifest dei workspace: npm ci valida il lockfile sull'intero monorepo
COPY package.json package-lock.json tsconfig.base.json ./
COPY packages/shared/package.json packages/shared/
COPY apps/api/package.json apps/api/
COPY apps/public/package.json apps/public/
COPY apps/private/package.json apps/private/
# --ignore-scripts: i postinstall di root e delle app Angular servono solo in sviluppo
RUN npm ci --ignore-scripts --no-audit --no-fund -w @iti/api -w @iti/shared --include-workspace-root

# --- Build ---
FROM deps AS build
COPY packages/shared packages/shared
COPY apps/api apps/api
RUN npm run build -w @iti/shared && npx tsc -p apps/api/tsconfig.build.json

# --- Runtime: solo dipendenze di produzione + JS compilato ---
FROM ${NODE_IMAGE} AS runtime
ENV NODE_ENV=production
WORKDIR /repo
COPY package.json package-lock.json ./
COPY packages/shared/package.json packages/shared/
COPY apps/api/package.json apps/api/
COPY apps/public/package.json apps/public/
COPY apps/private/package.json apps/private/
RUN npm ci --omit=dev --ignore-scripts --no-audit --no-fund -w @iti/api -w @iti/shared \
  && npm cache clean --force \
  # Volumi: uploads (condiviso con Caddy, che serve solo public/) e log su file
  && mkdir -p /data/uploads/public /data/uploads/private /var/log/iti \
  && chown -R node:node /data/uploads /var/log/iti
COPY --from=build /repo/packages/shared/dist packages/shared/dist
COPY --from=build /repo/apps/api/dist apps/api/dist
# Il migrator cerca le migrazioni in src/db/migrations rispetto alla root del package
COPY apps/api/src/db/migrations apps/api/src/db/migrations

USER node
WORKDIR /repo/apps/api
EXPOSE 3000
HEALTHCHECK --interval=15s --timeout=5s --start-period=30s --retries=5 \
  CMD ["node", "-e", "fetch('http://127.0.0.1:3000/health').then(r=>process.exit(r.ok?0:1),()=>process.exit(1))"]
CMD ["sh", "-c", "node dist/db/migrate.js && exec node dist/server.js"]