# =========================================================
# Stage 1: Build Go
# =========================================================
FROM golang:1.24-alpine AS builder
WORKDIR /app

RUN apk add --no-cache git ca-certificates tzdata gcc musl-dev

COPY backend/gestion/go.mod backend/gestion/go.sum ./

ENV GOPROXY=https://proxy.golang.org,direct
ENV GOSUMDB=sum.golang.org
ENV CGO_ENABLED=0

RUN go mod download

COPY backend/gestion/ .

RUN CGO_ENABLED=0 GOOS=linux go build \
    -ldflags="-w -s -X main.Version=1.0.0 -X main.BuildTime=$(date -u +%Y-%m-%dT%H:%M:%SZ)" \
    -o /app/server .

# =========================================================
# Stage 2: Runtime
# =========================================================
FROM alpine:latest AS runtime

RUN apk --no-cache add ca-certificates tzdata wget

RUN addgroup -g 101 app && adduser -u 101 -S app -G app

WORKDIR /app

COPY --from=builder /app/server .
COPY --from=builder /usr/share/zoneinfo /usr/share/zoneinfo

COPY helm/backend/entrypoint.sh .
RUN chmod +x entrypoint.sh

RUN mkdir -p /app/uploads/images /app/uploads/videos && \
    chown -R app:app /app

USER app

EXPOSE 8080

ENTRYPOINT ["./entrypoint.sh"]
