FROM qdrant/qdrant:latest

USER root
RUN apt-get update && apt-get install -y nginx && rm -rf /var/lib/apt/lists/*

RUN mkdir -p /qdrant/storage && chown -R 1000:1000 /qdrant/storage
VOLUME ["/qdrant/storage"]

# Qdrant listens internally on 6335; Nginx owns the public port 6333
ENV QDRANT__SERVICE__HTTP_PORT=6335

COPY nginx.conf /etc/nginx/nginx.conf
COPY entrypoint.sh /entrypoint.sh
RUN chmod +x /entrypoint.sh

# Required HF Space secrets (set via Settings → Variables and secrets):
#   QDRANT__SERVICE__API_KEY          — protects all write + read endpoints
#   QDRANT__SERVICE__READ_ONLY_API_KEY — optional, read-only clients

EXPOSE 6333

ENTRYPOINT ["/entrypoint.sh"]