# syntax=docker/dockerfile:1
# Sito pubblico Angular SSR (apps/public). Contesto di build: radice del monorepo.
#   docker build -f apps/public/Dockerfile -t iti-technology/public .
# Il server SSR (dist/public/server/server.mjs) contiene già tutte le dipendenze: il runtime non ha node_modules.
# La configurazione (dominio, URL dell'API, chiave Stripe…) arriva dalle variabili d'ambiente all'avvio.

ARG NODE_IMAGE=node:24-bookworm-slim

FROM ${NODE_IMAGE} AS deps
WORKDIR /repo
COPY package.json package-lock.json tsconfig.base.json ./
COPY packages/shared/package.json packages/shared/
COPY apps/api/package.json apps/api/
COPY apps/public/package.json apps/public/
COPY apps/private/package.json apps/private/
RUN npm ci --ignore-scripts --no-audit --no-fund -w @iti/public -w @iti/shared --include-workspace-root

FROM deps AS build
COPY packages/shared packages/shared
COPY packages/styles packages/styles
COPY apps/public apps/public
# prebuild: indice dei contenuti + asset di Leaflet
RUN npm run build -w @iti/shared && npm run build -w @iti/public

FROM ${NODE_IMAGE} AS runtime
ENV NODE_ENV=production PORT=4000
WORKDIR /app
COPY --from=build /repo/apps/public/dist/public ./dist/public
USER node
EXPOSE 4000
# /robots.txt è una route Express (prima del rendering Angular): non dipende dall'API né dall'host
HEALTHCHECK --interval=15s --timeout=5s --start-period=20s --retries=5 \
  CMD ["node", "-e", "fetch('http://127.0.0.1:4000/robots.txt').then(r=>process.exit(r.ok?0:1),()=>process.exit(1))"]
CMD ["node", "dist/public/server/server.mjs"]