# syntax=docker/dockerfile:1

# ── Stage 1: build ──────────────────────────────────────────────────────────
FROM node:22-alpine AS builder

WORKDIR /app

# Install dependencies first (better layer caching)
COPY package.json package-lock.json ./
RUN npm install

# Copy source and build
COPY . .
RUN npm run build

# Prune dev dependencies
RUN npm prune --production

# ── Stage 2: runtime ─────────────────────────────────────────────────────────
FROM node:22-alpine AS runtime

WORKDIR /app

# Runtime tools + timezone data
# yt-dlp prebuilt binary requires glibc; Alpine uses musl → install via pip instead
RUN apk add --no-cache ffmpeg tzdata python3 py3-pip && \
    pip3 install --no-cache-dir --break-system-packages yt-dlp

# Copy built output and production node_modules
# node:22-alpine ships with user node (uid=1000, gid=1000)
COPY --from=builder --chown=node:node /app/build ./build
COPY --from=builder --chown=node:node /app/node_modules ./node_modules
COPY --from=builder --chown=node:node /app/package.json ./

USER node

EXPOSE 3000

ENV NODE_ENV=production \
    PORT=3000 \
    HOST=0.0.0.0 \
    TZ=Europe/Zurich

CMD ["node", "build/index.js"]