Backend Deployment

# Stage 1: Builder
FROM oven/bun:latest AS builder

WORKDIR /app

COPY package.json bun.lock ./
RUN bun install --frozen-lockfile

COPY . .
RUN bun run build:api

# Stage 2: Production Runner
FROM oven/bun:latest AS runner

WORKDIR /app

# Create non-root user
RUN groupadd --system --gid 1001 nodejs && \
    useradd --system --uid 1001 --gid nodejs bunjs

COPY package.json bun.lock ./
RUN bun install --frozen-lockfile

COPY --from=builder --chown=bunjs:nodejs /app/api/dist ./api/dist
COPY --from=builder --chown=bunjs:nodejs /app/drizzle ./drizzle
COPY --from=builder --chown=bunjs:nodejs /app/drizzle.config.ts ./drizzle.config.ts
COPY --from=builder --chown=bunjs:nodejs /app/scripts ./scripts
COPY --from=builder --chown=bunjs:nodejs /app/src/db ./src/db
COPY --from=builder --chown=bunjs:nodejs /app/src/core/shared ./src/core/shared
COPY --from=builder --chown=bunjs:nodejs /app/src/env.ts ./src/env.ts
COPY --from=builder --chown=bunjs:nodejs /app/tsconfig.json ./tsconfig.json

RUN mkdir -p /app/logs && chown bunjs:nodejs /app/logs

USER bunjs

ENV PORT=8081
EXPOSE 8081

HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
    CMD bun -e "if ((await fetch('http://localhost:8081/health')).status !== 200) process.exit(1)"

CMD ["bun", "api/dist/index.js"]

services:
  # Backend API Server
  api:
    image: smoggyowo/autonome-api:latest
    container_name: autonome-api
    restart: always
    ports:
      - "8081:8081"
    env_file:
      - .env
    environment:
      - DATABASE_URL=postgresql://autonome:autonome_secret@db:5432/autonome
      - PORT=8081
    depends_on:
      db:
        condition: service_healthy
      seed:
        condition: service_completed_successfully

  # Migration Runner
  migrate:
    image: smoggyowo/autonome-api:latest
    container_name: autonome-migrate
    restart: "no"
    env_file:
      - .env
    environment:
      - DATABASE_URL=postgresql://autonome:autonome_secret@db:5432/autonome
    depends_on:
      db:
        condition: service_healthy
    command: ["bun", "run", "db:push"]

  # Database Seeder
  seed:
    image: smoggyowo/autonome-api:latest
    container_name: autonome-seed
    restart: "no"
    env_file:
      - .env
    environment:
      - DATABASE_URL=postgresql://autonome:autonome_secret@db:5432/autonome
    depends_on:
      migrate:
        condition: service_completed_successfully
    command: ["bun", "run", "db:seed"]

  # PostgreSQL Database
  db:
    image: postgres:16-alpine
    container_name: autonome-db
    restart: always
    environment:
      POSTGRES_USER: autonome
      POSTGRES_PASSWORD: autonome_secret
      POSTGRES_DB: autonome
    volumes:
      - postgres_data:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U autonome -d autonome"]
      interval: 10s
      timeout: 5s
      retries: 5

volumes:
  postgres_data:

api.autonome.app {
    reverse_proxy localhost:8081
    
    # Enable compression
    encode gzip
    
    # SSE requires long timeouts
    request_timeout 0
    
    # Health check
    handle /health {
        reverse_proxy localhost:8081
    }
}