FROM node:24-alpine AS build

WORKDIR /app

RUN corepack enable

COPY package.json pnpm-lock.yaml ./
RUN pnpm install --frozen-lockfile

COPY . .
RUN pnpm build

FROM nginx:1.31-alpine

RUN apk add --no-cache openssl

COPY nginx.conf.template /etc/nginx/templates/default.conf.template
COPY docker-entrypoint.d/10-ensure-cert.sh /docker-entrypoint.d/10-ensure-cert.sh
COPY docker-entrypoint.d/20-derive-runtime-env.envsh /docker-entrypoint.d/20-derive-runtime-env.envsh
RUN chmod +x /docker-entrypoint.d/10-ensure-cert.sh /docker-entrypoint.d/20-derive-runtime-env.envsh
COPY --from=build /app/dist /usr/share/nginx/html

EXPOSE 443