# syntax=docker/dockerfile:1.7

# Build context is the workspace root (galaxy/), not the backend/
# subdirectory, because the backend module pulls galaxy/{cronutil,error,
# geoip,model,postgres,schema,transcoder,util} through the go.work
# replace directives. Build with:
#
#     docker build -t galaxy/backend:integration -f backend/Dockerfile .

FROM golang:1.26.2-alpine AS builder
WORKDIR /src
ENV CGO_ENABLED=0 GOFLAGS=-trimpath

COPY pkg/cronutil/   ./pkg/cronutil/
COPY pkg/error/      ./pkg/error/
COPY pkg/geoip/      ./pkg/geoip/
COPY pkg/model/      ./pkg/model/
COPY pkg/postgres/   ./pkg/postgres/
COPY pkg/schema/     ./pkg/schema/
COPY pkg/transcoder/ ./pkg/transcoder/
COPY pkg/util/       ./pkg/util/
COPY backend/        ./backend/

# Synthesise a minimal go.work tailored to the backend binary so the
# repository-level workspace (which lists every module) does not need
# to be copied into the build context.
RUN <<'EOF' cat > go.work
go 1.26.2

use (
	./backend
	./pkg/cronutil
	./pkg/error
	./pkg/geoip
	./pkg/model
	./pkg/postgres
	./pkg/schema
	./pkg/transcoder
	./pkg/util
)

replace (
	galaxy/cronutil v0.0.0   => ./pkg/cronutil
	galaxy/error v0.0.0      => ./pkg/error
	galaxy/geoip v0.0.0      => ./pkg/geoip
	galaxy/model v0.0.0      => ./pkg/model
	galaxy/postgres v0.0.0   => ./pkg/postgres
	galaxy/schema v0.0.0     => ./pkg/schema
	galaxy/transcoder v0.0.0 => ./pkg/transcoder
	galaxy/util v0.0.0       => ./pkg/util
)
EOF

RUN --mount=type=cache,target=/root/.cache/go-build \
    --mount=type=cache,target=/go/pkg/mod \
    go build -ldflags="-s -w" -o /out/backend ./backend/cmd/backend

FROM gcr.io/distroless/static-debian12:nonroot AS runtime

LABEL org.opencontainers.image.title="galaxy-backend"

EXPOSE 8080
EXPOSE 8081
USER nonroot:nonroot

COPY --from=builder /out/backend /usr/local/bin/backend

ENTRYPOINT ["/usr/local/bin/backend"]
