FROM python:3.12-slim AS builder

COPY --from=ghcr.io/astral-sh/uv:0.5.9 /uv /usr/local/bin/uv

ENV UV_COMPILE_BYTECODE=1 \
    UV_LINK_MODE=copy \
    UV_PROJECT_ENVIRONMENT=/opt/repo-manager

WORKDIR /src

COPY pyproject.toml uv.lock README.md ./
COPY src/ ./src/

RUN uv sync --frozen --no-dev --no-editable

FROM python:3.12-slim AS runtime

ENV PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1 \
    PATH="/opt/repo-manager/bin:${PATH}" \
    REPO_MANAGER_REGISTRY_PATH=/etc/repo-manager/repository-registry.yaml \
    REPO_MANAGER_FORGEJO_BASE_URL=https://forgejo.coulomb.social \
    REPO_MANAGER_PROJECTION_PAGE_SIZE=100 \
    REPO_MANAGER_FORGEJO_WORKERS=8

ARG VERSION=0.1.0
ARG VCS_REF=unknown

LABEL org.opencontainers.image.title="repo-manager-classification-publisher" \
    org.opencontainers.image.version="${VERSION}" \
    org.opencontainers.image.revision="${VCS_REF}" \
    org.opencontainers.image.source="https://forgejo.coulomb.social/coulomb/repo-manager"

RUN useradd --create-home --uid 10002 --shell /usr/sbin/nologin repomanager \
    && mkdir -p /etc/repo-manager \
    && chown 10002:10002 /etc/repo-manager

COPY --from=builder /opt/repo-manager /opt/repo-manager
COPY --chown=10002:10002 config/repository-registry.yaml /etc/repo-manager/repository-registry.yaml

USER 10002:10002
WORKDIR /home/repomanager

EXPOSE 8020

HEALTHCHECK --interval=30s --timeout=5s --start-period=15s --retries=3 \
    CMD python -c "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8020/healthz', timeout=3).read()"

CMD ["rmgr", "publisher", "api", "--host", "0.0.0.0", "--port", "8020"]