# Image produksi Sistem Akuntansi Sekolah (SAS) Open Source (Node + Express). DB terpisah (lihat docker-compose.yml).
FROM node:22-alpine

WORKDIR /app
ENV NODE_ENV=production

# Instal hanya dependensi produksi (devDeps seperti playwright/pagedjs tidak diperlukan runtime)
COPY package.json package-lock.json ./
RUN npm ci --omit=dev && npm cache clean --force

# Salin sumber termasuk panduan/tes untuk paket unduhan; env privat/data dikecualikan.
COPY --chown=node:node . .
RUN node src/release.js

# Folder data (backup) — dipetakan ke volume di compose
RUN mkdir -p /app/data/backups
RUN chown -R node:node /app/data
USER node

# Tetap dapat dibaca bila checkout host dibuat dengan umask 077.
RUN node -e "const fs=require('fs'); for (const file of ['server.js','src/db/initialize.js','src/db/schema.sql','public/index.html','release/sas-opensource.zip']) fs.accessSync(file,fs.constants.R_OK)"

EXPOSE 3000

# Aplikasi membaca HOST/PORT/DATABASE_URL/SESSION_SECRET dari environment
HEALTHCHECK --interval=30s --timeout=5s --start-period=20s --retries=3 \
  CMD wget -qO- http://127.0.0.1:3000/api/health || exit 1

CMD ["node", "server.js"]
