# backend/Dockerfile
FROM node:18-alpine

WORKDIR /app

# Copy package files
COPY package*.json ./

# Install dependencies
RUN npm ci --only=production && npm cache clean --force

# Copy application code
COPY . .

# Expose port
EXPOSE 3001

# Health check
HEALTHCHECK --interval=30s --timeout=10s --start-period=40s --retries=3 \
  CMD node -e "require('http').get('http://localhost:3001/health', (r) => {process.exit(r.statusCode === 200 ? 0 : 1)})"

# Start server
CMD ["npm", "start"]

# backend/Dockerfile

# =============================================================================
# Stage 1: Builder - Install dependencies and prepare application
# =============================================================================
FROM node:18-alpine AS builder

WORKDIR /app

# Copy package files first (for better caching)
COPY package*.json ./

# Install ALL dependencies (including devDependencies for potential build steps)
RUN npm ci && npm cache clean --force

# Copy application source
COPY . .

# Optional: Run build steps if needed (e.g., TypeScript compilation)
# RUN npm run build

# Remove development dependencies
RUN npm prune --production

# =============================================================================
# Stage 2: Production - Minimal runtime image
# =============================================================================
FROM node:18-alpine

# Install dumb-init to handle PID 1 responsibilities
RUN apk add --no-cache dumb-init

# Create non-root user and group
RUN addgroup -g 1001 -S nodejs && \
    adduser -S geminiflow -u 1001 -G nodejs

WORKDIR /app

# Create data directory with correct permissions
RUN mkdir -p .data && \
    chown -R geminiflow:nodejs .data

# Copy dependencies from builder stage
COPY --from=builder --chown=geminiflow:nodejs /app/node_modules ./node_modules

# Copy application code with correct ownership
COPY --chown=geminiflow:nodejs . .

# Switch to non-root user
USER geminiflow

# Expose port
EXPOSE 3001

# Health check (runs as non-root user)
HEALTHCHECK --interval=30s --timeout=10s --start-period=40s --retries=3 \
  CMD node -e "require('http').get('http://localhost:3001/health', (r) => {process.exit(r.statusCode === 200 ? 0 : 1)})" || exit 1

# Use dumb-init to handle signals properly
ENTRYPOINT ["dumb-init", "--"]

# Start server
CMD ["node", "src/server.js"]

RUN addgroup -g 1001 -S nodejs && \
    adduser -S geminiflow -u 1001 -G nodejs
USER geminiflow

COPY --from=builder --chown=geminiflow:nodejs /app/node_modules ./node_modules

RUN apk add --no-cache dumb-init
ENTRYPOINT ["dumb-init", "--"]

# backend/Dockerfile.advanced

FROM node:18-alpine AS builder

WORKDIR /app

# Accept build arguments
ARG NODE_ENV=production
ARG BUILD_VERSION=unknown
ARG BUILD_DATE=unknown

# Copy and install dependencies
COPY package*.json ./
RUN npm ci --only=production && npm cache clean --force

COPY . .

# =============================================================================
# Production stage
# =============================================================================
FROM node:18-alpine

# Install runtime dependencies
RUN apk add --no-cache \
    dumb-init \
    tini \
    curl

# Create non-root user
RUN addgroup -g 1001 -S nodejs && \
    adduser -S geminiflow -u 1001 -G nodejs

# Add labels for metadata
LABEL org.opencontaine...

</details>

- Fixes clduab11/gemini-flow#81

<!-- START COPILOT CODING AGENT TIPS -->
---

✨ Let Copilot coding agent [set things up for you](https://github.com/clduab11/gemini-flow/issues/new?title=✨+Set+up+Copilot+instructions&body=Configure%20instructions%20for%20this%20repository%20as%20documented%20in%20%5BBest%20practices%20for%20Copilot%20coding%20agent%20in%20your%20repository%5D%28https://gh.io/copilot-coding-agent-tips%29%2E%0A%0A%3COnboard%20this%20repo%3E&assignees=copilot) — coding agent works faster and does higher quality work when set up for your repo.