# Compose
services:
  verification:
    image: # image name
    tty: true
    stdin_open: true
    environment:
      NEXT_PUBLIC_APP_URL: ${NEXT_PUBLIC_APP_URL}
      NEXT_PUBLIC_DISCORD_CLIENT_ID: ${NEXT_PUBLIC_DISCORD_CLIENT_ID}
      DISCORD_CLIENT_SECRET: ${DISCORD_CLIENT_SECRET}
      NEXT_PUBLIC_SENTRY_DSN: ${NEXT_PUBLIC_SENTRY_DSN}
    networks:
      - traefik
    deploy:
      update_config:
        parallelism: 1
      replicas: 1
      labels:
        # traefik labels, likely unrelated

networks:
  traefik:
    external: true

FROM oven/bun:1 AS base
WORKDIR /usr/src/app

# Hot reload
FROM base AS hot
VOLUME /usr/src/app

COPY package.json bun.lock tsconfig.json ./

RUN bun install --frozen-lockfile

COPY public ./public
COPY src ./src
COPY sentry.edge.config.ts sentry.server.config.ts next.config.ts postcss.config.mjs components.json ./

EXPOSE 3000
ENV NODE_ENV=development

CMD ["bun", "dev"]

# Build image for prod
FROM base AS build

COPY package.json bun.lock tsconfig.json ./
RUN apt-get update
RUN apt-get install ca-certificates -y

RUN bun install --frozen-lockfile

ARG VERSION
ARG COMMIT_SHA

ENV NEXT_PUBLIC_APP_VERSION=${VERSION:-latest}
ENV NEXT_PUBLIC_COMMIT_SHA=${COMMIT_SHA:-localbuild}

COPY src ./src
COPY public ./public
COPY sentry.edge.config.ts sentry.server.config.ts next.config.ts postcss.config.mjs components.json ./

RUN --mount=type=secret,id=SENTRY_AUTH_TOKEN \
    SENTRY_AUTH_TOKEN="$(cat /run/secrets/SENTRY_AUTH_TOKEN)" \
    VERSION="${VERSION:-latest}" \
    bun run build

# Run prod image
FROM build AS prod
WORKDIR /usr/src/app
ARG VERSION

COPY --from=build /usr/src/app/package.json ./
COPY --from=build /usr/src/app/.next ./.next
COPY --from=build /usr/src/app/public ./public

EXPOSE 3000
ENV NODE_ENV=production
CMD ["bun", "run", "start"]