FROM node:20-alpine AS base

ENV TZ=Asia/Tehran
RUN apk add --no-cache tzdata

FROM base AS builder
WORKDIR /build

COPY package*.json ./
RUN --mount=type=cache,target=/root/.npm \
    npm ci

COPY . .
RUN npm run build
RUN npm prune --omit=dev

FROM base AS runner
WORKDIR /app

ENV NUXT_TELEMETRY_DISABLED=1
ENV NODE_ENV=production
ENV PORT=3000
ENV HOSTNAME=0.0.0.0

RUN addgroup -S appgroup && \
    adduser -S appuser -G appgroup && \
    chown appuser:appgroup /app

COPY --from=builder --chown=appuser:appgroup /build/.nuxt ./.nuxt
COPY --from=builder --chown=appuser:appgroup /build/static ./static
COPY --from=builder --chown=appuser:appgroup /build/server ./server
COPY --from=builder --chown=appuser:appgroup /build/nuxt.config.js ./
COPY --from=builder --chown=appuser:appgroup /build/node_modules ./node_modules
COPY --from=builder --chown=appuser:appgroup /build/package.json ./package.json

USER appuser

EXPOSE 3000

HEALTHCHECK --interval=30s --timeout=5s --start-period=30s --retries=3 \
    CMD node -e "require('http').get('http://127.0.0.1:3000/',r=>process.exit(r.statusCode<500?0:1)).on('error',()=>process.exit(1))"

CMD ["node", "node_modules/nuxt/bin/nuxt.js", "start"]