FROM python:3.12-slim AS builder

COPY --from=ghcr.io/astral-sh/uv:0.5.9 /uv /usr/local/bin/uv

ENV UV_COMPILE_BYTECODE=1 \
    UV_LINK_MODE=copy \
    UV_PROJECT_ENVIRONMENT=/opt/hub-core

WORKDIR /src

COPY pyproject.toml uv.lock README.md LICENSE ./
COPY hub_core/ ./hub_core/

RUN uv sync --frozen --no-dev --extra runtime --no-editable

FROM python:3.12-slim AS runtime

ENV PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1 \
    PATH="/opt/hub-core/bin:${PATH}" \
    HUB_CORE_ENV=production \
    HUB_CORE_BACKEND=memory \
    HUB_CORE_ALLOW_EPHEMERAL=0 \
    HUB_CORE_API_HOST=0.0.0.0 \
    HUB_CORE_API_PORT=8010

ARG VERSION=0.2.0
ARG VCS_REF=unknown

LABEL org.opencontainers.image.title="hub-core" \
    org.opencontainers.image.version="${VERSION}" \
    org.opencontainers.image.revision="${VCS_REF}" \
    org.opencontainers.image.source="https://forgejo.coulomb.social/coulomb/hub-core"

RUN useradd --create-home --uid 10001 --shell /usr/sbin/nologin hubcore

COPY --from=builder /opt/hub-core /opt/hub-core

USER 10001:10001
WORKDIR /home/hubcore

EXPOSE 8010 8011

HEALTHCHECK --interval=30s --timeout=5s --start-period=15s --retries=3 \
    CMD python -c "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8010/healthz', timeout=3).read()"

CMD ["hub-core", "api", "--host", "0.0.0.0", "--port", "8010"]