# ---- Build stage -----------------------------------------------------
FROM node:22-alpine AS build

WORKDIR /app

# Backend URLs are baked in at build time (Vite inlines VITE_* variables).
ARG VITE_API_BASE=https://localhost:3000
ARG VITE_WS_BASE
ENV VITE_API_BASE=$VITE_API_BASE
ENV VITE_WS_BASE=$VITE_WS_BASE

COPY package*.json ./
RUN npm install

COPY . .
RUN npm run build

# ---- Runtime stage ---------------------------------------------------
FROM nginx:1.27-alpine AS runtime

# openssl is needed to generate the self-signed certificate on first start.
RUN apk add --no-cache openssl

COPY nginx.conf /etc/nginx/conf.d/default.conf
COPY docker/40-self-signed-ssl.sh /docker-entrypoint.d/40-self-signed-ssl.sh
RUN chmod +x /docker-entrypoint.d/40-self-signed-ssl.sh

COPY --from=build /app/dist /usr/share/nginx/html

EXPOSE 443

# The base nginx image entrypoint runs every script in /docker-entrypoint.d.