# syntax=docker/dockerfile:1
FROM node:22.19.0-bookworm-slim@sha256:4a4884e8a44826194dff92ba316264f392056cbe243dcc9fd3551e71cea02b90 AS build
WORKDIR /src/frontend
COPY frontend/package.json frontend/package-lock.json ./
RUN npm ci --no-audit --no-fund
COPY frontend/ ./
RUN npm run build

FROM nginxinc/nginx-unprivileged:1.27.5-alpine@sha256:65e3e85dbaed8ba248841d9d58a899b6197106c23cb0ff1a132b7bfe0547e4c0
USER root
RUN apk add --no-cache jq
COPY --from=build /src/frontend/dist /usr/share/nginx/html
COPY docker/nginx.conf.template /etc/nginx/conf.d/default.conf
COPY docker/frontend-entrypoint.sh /usr/local/bin/frontend-entrypoint
COPY docker/validate-backend-url.sh /usr/local/bin/validate-backend-url
COPY docker/smoke/frontend-smoke.sh /usr/local/bin/frontend-config-smoke
COPY docker/smoke/frontend-policy-smoke.sh /usr/local/bin/frontend-policy-smoke
COPY frontend/src/api/backend-url-policy.json /etc/thothii/backend-url-policy.json
COPY frontend/src/api/backend-url-cases.json /etc/thothii/backend-url-cases.json
RUN chmod 0555 /usr/local/bin/frontend-entrypoint /usr/local/bin/validate-backend-url \
      /usr/local/bin/frontend-config-smoke /usr/local/bin/frontend-policy-smoke \
    && chown -R 101:101 /usr/share/nginx/html

EXPOSE 8080
USER 101:101
ENTRYPOINT ["/usr/local/bin/frontend-entrypoint"]