# syntax=docker/dockerfile:1.6
FROM python:3.11-slim

RUN apt-get update && apt-get install -y --no-install-recommends \
    build-essential libgomp1 curl \
    && rm -rf /var/lib/apt/lists/*

ENV PIP_DISABLE_PIP_VERSION_CHECK=1 \
    PIP_NO_CACHE_DIR=1 \
    PYTHONUNBUFFERED=1 \
    PYTHONDONTWRITEBYTECODE=1 \
    PORT=8000

WORKDIR /app

COPY backend/requirements.txt ./backend/requirements.txt
RUN pip install --upgrade pip && pip install -r backend/requirements.txt

COPY backend ./backend
COPY frontend ./frontend
COPY "Master Standard report and paragraphs" "./Master Standard report and paragraphs"

ENV DATA_DIR=/data \
    MASTER_TEMPLATE_DIR="/app/Master Standard report and paragraphs" \
    MASTER_TEMPLATE_AUTO_INGEST=true \
    REFERENCE_AUTO_INGEST_ENABLED=true \
    OPENAI_API_KEY="" \
    JWT_SECRET=change-me-in-demo

RUN mkdir -p /data && useradd -u 1000 -m appuser && chown -R appuser:appuser /app /data
USER appuser

EXPOSE 8000

HEALTHCHECK --interval=30s --timeout=10s --retries=3 \
  CMD curl -fsS "http://localhost:${PORT}/health" || exit 1

CMD ["sh", "-c", "uvicorn backend.main:app --host 0.0.0.0 --port ${PORT}"]