FROM node:22-bookworm-slim

LABEL org.opencontainers.image.description="ToolCTRL Website"

ARG APP_REVISION=local

ENV NODE_ENV=production \
    PORT=3000 \
    HOST=0.0.0.0 \
    DATA_DIR=/app/data \
    CLAMAV_ENABLED=false \
    APP_REVISION=${APP_REVISION}

RUN apt-get update \
  && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends ca-certificates curl \
  && rm -rf /var/lib/apt/lists/* \
  && groupadd --gid 1001 nodejs \
  && useradd --uid 1001 --gid nodejs --home-dir /app --shell /usr/sbin/nologin nodejs

WORKDIR /app

COPY --chown=nodejs:nodejs public ./public
COPY --chown=nodejs:nodejs server.js ./server.js

RUN mkdir -p /app/data \
  && chown -R nodejs:nodejs /app/data

USER nodejs

EXPOSE 3000

HEALTHCHECK --interval=30s --timeout=3s --start-period=10s --retries=3 \
  CMD curl -fsS http://127.0.0.1:3000/healthz >/dev/null || exit 1

CMD ["node", "server.js"]