FROM rust:1.87-bookworm AS builder

WORKDIR /app

RUN apt-get update && apt-get install -y --no-install-recommends \
    protobuf-compiler \
    && rm -rf /var/lib/apt/lists/*

COPY Cargo.toml Cargo.lock ./
RUN mkdir src && echo "fn main() {}" > src/main.rs
RUN cargo build --release --features "db-sqlite plugin-all search-tantivy storage-s3" 2>/dev/null || true
RUN rm -rf src

COPY src/ src/
COPY migrations/ migrations/
COPY extensions/ extensions/
RUN touch src/main.rs \
    && cargo build --release --features "db-sqlite plugin-all search-tantivy storage-s3"

FROM debian:bookworm-slim

RUN apt-get update && apt-get install -y --no-install-recommends \
    ca-certificates \
    curl \
    && rm -rf /var/lib/apt/lists/*

RUN groupadd --gid 1000 app \
    && useradd --uid 1000 --gid app --shell /bin/bash --create-home app

WORKDIR /app

COPY --from=builder /app/target/release/raisfast /app/raisfast
COPY migrations/ migrations/
COPY extensions/ extensions/

RUN mkdir -p /app/data /app/logs /app/uploads /app/plugins-data \
    && chown -R app:app /app/data /app/logs /app/uploads /app/plugins-data

USER app

ENV APP_HOST=0.0.0.0
ENV APP_PORT=9898

EXPOSE 9898

HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
    CMD curl -f http://localhost:9898/healthz || exit 1

CMD ["./raisfast"]