# syntax=docker/dockerfile:1
# check=error=true

ARG RUBY_VERSION=3.3.6
ARG RUBY_ABI_VERSION=3.3.0
ARG NODE_VERSION=22
FROM docker.io/library/ruby:$RUBY_VERSION-slim AS base

WORKDIR /rails

RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
    --mount=type=cache,target=/var/lib/apt,sharing=locked \
    apt-get update -qq && \
    apt-get install --no-install-recommends -y curl libjemalloc2 libvips postgresql-client

ENV RAILS_ENV="production" \
    BUNDLE_DEPLOYMENT="1" \
    BUNDLE_PATH="/usr/local/bundle" \
    BUNDLE_WITHOUT="development:test"

# ==============================================================================
# Throw-away build stage to reduce size of final image
# ==============================================================================
ARG RUBY_ABI_VERSION
ARG NODE_VERSION
FROM base AS build

RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
    --mount=type=cache,target=/var/lib/apt,sharing=locked \
    --mount=type=cache,target=/root/.npm \
    apt-get update -qq && \
    curl -fsSL https://deb.nodesource.com/setup_${NODE_VERSION}.x | bash - && \
    apt-get install --no-install-recommends -y build-essential git libpq-dev libyaml-dev pkg-config nodejs && \
    npm install -g yarn

# Gems: cache downloaded .gem files separately from extracted gems.
# The cache mount target matches the bundler download cache for the Ruby ABI version.
COPY Gemfile Gemfile.lock ./

RUN --mount=type=cache,id=bundler,target=/usr/local/bundle/ruby/${RUBY_ABI_VERSION}/cache \
    bundle install && \
    rm -rf "${BUNDLE_PATH}"/ruby/*/bundler/gems/*/.git && \
    bundle exec bootsnap precompile --gemfile

# Node modules: cache yarn downloads independently of app code.
# .npmrc is injected via secret at build time — no need to COPY it.
COPY package.json yarn.lock ./
RUN --mount=type=cache,id=yarn,target=/yarn-cache \
    --mount=type=secret,id=npmrc,target=/rails/.npmrc \
    yarn install --frozen-lockfile --cache-folder /yarn-cache

COPY . .

RUN bundle exec bootsnap precompile app/ lib/

RUN ./bin/vite build

RUN rm -rf node_modules tmp/cache vendor/javascript spec test

# ==============================================================================
# Final stage for app image
# ==============================================================================
FROM base

COPY --from=build "${BUNDLE_PATH}" "${BUNDLE_PATH}"
COPY --from=build /rails /rails

RUN groupadd --system --gid 1000 rails && \
    useradd rails --uid 1000 --gid 1000 --create-home --shell /bin/bash && \
    chown -R rails:rails db log storage tmp
USER 1000:1000

ENTRYPOINT ["/rails/bin/docker-entrypoint.prod.sh"]

EXPOSE 3000
CMD ["./bin/rails", "server", "-b", "0.0.0.0", "-p", "3000"]