FROM node:20-bookworm AS base

# Server often cannot reach registry.npmjs.org (Cloudflare). Override in Dokploy if needed.
ARG NPM_REGISTRY=https://mirror.kargadan.ir/repository/npm-group/
ENV npm_config_registry=${NPM_REGISTRY}
ENV PNPM_HOME="/pnpm"
ENV PATH="$PNPM_HOME:$PATH"

# Skip corepack (it fetches pnpm from npmjs/Cloudflare). Install from mirror instead.
# Pin major only — Iranian mirrors often lag behind exact patch versions (e.g. 2.10.12).
RUN npm install -g pnpm@9 turbo@2 \
    && printf 'registry=%s\n' "${NPM_REGISTRY}" > /root/.npmrc

FROM base AS builder
WORKDIR /app
COPY . .
RUN turbo prune api --docker

FROM base AS installer
WORKDIR /app

# First install dependencies (as they change less often)
COPY .gitignore .gitignore
COPY --from=builder /app/out/json/ .
COPY --from=builder /app/out/pnpm-lock.yaml ./pnpm-lock.yaml
RUN pnpm install --frozen-lockfile

# Build the project and its dependencies
COPY --from=builder /app/out/full/ .
COPY turbo.json turbo.json
# Generate prisma client before building
RUN pnpm --filter api exec prisma generate
RUN pnpm turbo run build --filter=api...

FROM base AS runner
WORKDIR /app

# Don't run production as root
RUN groupadd --system --gid 1001 nodejs \
    && useradd --system --uid 1001 --gid nodejs nestjs
USER nestjs

COPY --from=installer /app .

WORKDIR /app/apps/api

EXPOSE 3000
CMD ["node", "dist/main.js"]