# vim: filetype=dockerfile
FROM chewingbever/fej-builder:latest AS builder

# And then finally, build the project
# Thank the lords that this article exists
# https://users.rust-lang.org/t/sigsegv-with-program-linked-against-openssl-in-an-alpine-container/52172
# TODO add what these flags do & why they work
# NOTE: cargo install auto-appends bin to the path

# RUN --mount=type=cache,mode=0777,target=/app/target \
#     --mount=type=cache,mode=0777,target=/app/.cargo/registry \

# Buildkit cache mounts really don't like it when you're not root,
# so I guess we're building release without a cache for now
RUN cargo install \
    --path . \
    --root /app/output \
    --target x86_64-unknown-linux-musl


# Now, we create the actual image
FROM alpine:latest

# Install some dynamic libraries needed for everything to work
# Create -non-root user
RUN apk update && \
    apk add --no-cache \
        curl \
        libgcc \
        libpq \
        openssl && \
    addgroup -S fej && \
    adduser -S fej -G fej -h /app

# Switch to non-root user
USER fej:fej

# Copy binary over to final image
COPY --from=builder --chown=fej:fej /app/output/bin /app/bin

# Embed config file inside container
# The workdir is changed so that the config file is read properly
WORKDIR /app
COPY --chown=fej:fej Rocket.toml /app/Rocket.toml
COPY ./docker/entrypoint.sh /entrypoint.sh

HEALTHCHECK \
    --interval=10s \
    --timeout=5s \
    --start-period=1s \
    --retries=3 \
    CMD curl -q localhost:8000

ENTRYPOINT ["/entrypoint.sh"]