FROM node:22-alpine

LABEL org.opencontainers.image.title="HerdOS API"
LABEL org.opencontainers.image.description="JSON REST API for HerdOS Main and HerdOS Field"
LABEL org.opencontainers.image.source="HerdOS"

WORKDIR /app

ENV NODE_ENV=production
ENV HERDOS_API_HOST=0.0.0.0
ENV HERDOS_DATA_FILE=/data/herdos-store.json
ENV HERDOS_REQUIRE_TENANT=true

COPY package.json package-lock.json ./
RUN npm ci --omit=dev --include=optional --ignore-scripts --no-audit --no-fund

COPY server.js ./
COPY db ./db
COPY data ./data

RUN addgroup -S herdos \
  && adduser -S herdos -G herdos \
  && mkdir -p /data \
  && chown -R herdos:herdos /app /data

USER herdos

EXPOSE 8080

HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
  CMD node -e "fetch('http://127.0.0.1:' + (process.env.PORT || process.env.HERDOS_API_PORT || 8080) + '/health').then((r) => process.exit(r.ok ? 0 : 1)).catch(() => process.exit(1))"

CMD ["node", "server.js"]
