FROM rust:1.96.1-bookworm AS builder

WORKDIR /app

COPY Cargo.toml Cargo.lock ./
COPY .sqlx ./.sqlx
COPY apps ./apps
COPY crates ./crates

RUN --mount=type=cache,id=crank-admin-cargo-registry,target=/usr/local/cargo/registry \
    --mount=type=cache,id=crank-admin-cargo-git,target=/usr/local/cargo/git/db \
    --mount=type=cache,id=crank-admin-target,target=/app/target \
    SQLX_OFFLINE=true cargo build --release -p admin-api \
    && cp /app/target/release/admin-api /tmp/admin-api \
    && cp /app/target/release/crank-migrate /tmp/crank-migrate

FROM debian:bookworm-slim

COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt

RUN test -s /etc/ssl/certs/ca-certificates.crt \
    && sed -i 's|http://deb.debian.org|https://deb.debian.org|g' /etc/apt/sources.list.d/debian.sources \
    && grep -q '^URIs: https://deb.debian.org/' /etc/apt/sources.list.d/debian.sources \
    && ! grep -Eq '^[[:space:]]*URIs:[[:space:]]+http://' /etc/apt/sources.list.d/debian.sources \
    && apt-get -o Acquire::Retries=3 update \
    && apt-get -o Acquire::Retries=3 install -y --no-install-recommends ca-certificates curl \
    && rm -rf /var/lib/apt/lists/*

WORKDIR /app

COPY --from=builder /tmp/admin-api /usr/local/bin/admin-api
COPY --from=builder /tmp/crank-migrate /usr/local/bin/crank-migrate
COPY apps/admin-api/docker-entrypoint.sh /usr/local/bin/crank-admin-entrypoint

RUN chmod 0755 /usr/local/bin/crank-admin-entrypoint

ENV CRANK_ADMIN_BIND=0.0.0.0:3001
ENV CRANK_STORAGE_ROOT=/var/lib/crank/storage

EXPOSE 3001

ENTRYPOINT ["/usr/local/bin/crank-admin-entrypoint"]
CMD ["admin-api"]
