FROM node:24-bookworm AS installer

WORKDIR /app

# Install bun and enable corepack for yarn

RUN corepack enable \

&& npm install -g bun

ARG VERSION

ENV VERSION="${VERSION}" \

CI=true

# Copy dependency files first for better caching (includes all workspaces)

COPY package.json yarn.lock .yarnrc.yml ./

COPY apps/web/package.json ./apps/web/

COPY apps/electron/package.json ./apps/electron/

COPY apps/admin/package.json ./apps/admin/

COPY packages/auth-core/package.json ./packages/auth-core/

# Install dependencies (this layer is cached unless dependency files change)

RUN yarn install --immutable

# Copy source code

COPY . .

# Build application and bootstrap script

RUN yarn run build \

&& mkdir -p apps/web/dist-scripts \

&& bun build apps/web/scripts/bootstrap.ts --target=node --format=esm --outfile=apps/web/dist-scripts/bootstrap.mjs \

&& cp -rn node_modules/@electric-sql/pglite/dist/. apps/web/dist-scripts/ \

&& cp node_modules/@electric-sql/pglite-legacy/dist/postgres.data apps/web/dist-scripts/ \

&& cp node_modules/@electric-sql/pglite-legacy/dist/postgres.wasm apps/web/dist-scripts/ \

&& rm -f apps/web/.next/standalone/.env apps/web/.next/standalone/.env.local

FROM node:24-bookworm-slim AS runner

ENV NODE_ENV=production \

HOSTNAME=0.0.0.0 \

PORT=3000 \

DORY_RUNTIME=docker \

NEXT_PUBLIC_DORY_RUNTIME=docker

# tzdata

RUN apt-get update && apt-get install -y --no-install-recommends tzdata ca-certificates \

&& rm -rf /var/lib/apt/lists/*

# Use built-in node user for security

USER node

WORKDIR /app

COPY --from=installer --chown=node:node /app/apps/web/.next/standalone ./

COPY --from=installer --chown=node:node /app/apps/web/public ./apps/web/public

COPY --from=installer --chown=node:node /app/apps/web/dist-scripts ./dist-scripts

COPY --from=installer --chown=node:node /app/apps/web/.next/static ./apps/web/.next/static

EXPOSE 3000

CMD ["sh", "-c", "node dist-scripts/bootstrap.mjs && exec node apps/web/server.js"]