# -------- 1) Composer deps (no scripts; avoids artisan during build) --------
  FROM composer:2 AS vendor
  ARG COMPOSER_NO_DEV=1
  WORKDIR /app
  COPY composer.json composer.lock ./
  RUN if [ "$COMPOSER_NO_DEV" = "1" ]; then \
        composer install --no-dev --prefer-dist --no-progress --no-interaction --classmap-authoritative --no-scripts; \
      else \
        composer install --prefer-dist --no-progress --no-interaction --no-scripts; \
      fi
  
  # -------- 2) App source --------
  FROM alpine:3.20 AS app_src
  WORKDIR /app
  COPY . ./
  
  # -------- 3) Final: Nginx + PHP-FPM + PGSQL drivers --------
  FROM php:8.4-fpm-alpine
  
  # Build + runtime deps (incl. oniguruma for mbstring, GD runtime libs)
  RUN set -eux; \
      apk add --no-cache --virtual .build-deps \
          $PHPIZE_DEPS icu-dev libzip-dev postgresql-dev \
          freetype-dev libjpeg-turbo-dev libpng-dev \
          oniguruma-dev pkgconf \
      && apk add --no-cache \
          icu-libs libzip libpq tzdata bash git curl \
          nginx supervisor \
          oniguruma freetype libjpeg-turbo libpng \
      && docker-php-ext-configure intl \
      && docker-php-ext-configure gd --with-freetype --with-jpeg \
      && docker-php-ext-install -j"$(nproc)" intl opcache zip bcmath mbstring gd pdo pdo_pgsql pgsql \
      && apk del .build-deps \
      && rm -rf /var/cache/apk/* /tmp/*
  
  # PHP runtime tuning
  RUN set -eux; \
      { \
        echo "memory_limit=512M"; \
        echo "upload_max_filesize=64M"; \
        echo "post_max_size=64M"; \
        echo "max_execution_time=60"; \
        echo "date.timezone=UTC"; \
        echo "opcache.enable=1"; \
        echo "opcache.enable_cli=0"; \
        echo "opcache.validate_timestamps=0"; \
        echo "opcache.jit=tracing"; \
        echo "opcache.jit_buffer_size=128M"; \
        echo "opcache.interned_strings_buffer=16"; \
        echo "opcache.max_accelerated_files=20000"; \
      } > /usr/local/etc/php/conf.d/laravel.ini
  
  # Dirs
  RUN mkdir -p /run/php /run/nginx /var/log/supervisor /var/www/html /etc/nginx/http.d
  
  # Install Composer
RUN set -eux; \
php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');"; \
php composer-setup.php --install-dir=/usr/local/bin --filename=composer; \
php -r "unlink('composer-setup.php');"

  # Copy app + vendor
  COPY --from=app_src /app /var/www/html
  COPY --from=vendor /app/vendor /var/www/html/vendor
  
  # Nginx, PHP-FPM socket, Supervisor, entrypoint
  COPY deploy/nginx/default.conf        /etc/nginx/http.d/default.conf
  COPY deploy/php-fpm/zz-socket.conf    /usr/local/etc/php-fpm.d/zz-socket.conf
  COPY deploy/php-fpm/zz-logging.conf /usr/local/etc/php-fpm.d/zz-logging.conf
  COPY deploy/supervisord.conf          /etc/supervisord.conf
  COPY deploy/entrypoint.sh             /usr/local/bin/entrypoint.sh
  RUN chmod +x /usr/local/bin/entrypoint.sh
  
  WORKDIR /var/www/html
  
  # Never ship stale compiled caches
  RUN rm -rf bootstrap/cache/*.php || true
  
  # Laravel write perms
  RUN set -eux; \
      mkdir -p storage bootstrap/cache; \
      chown -R www-data:www-data storage bootstrap/cache; \
      find storage -type d -exec chmod 775 {} \; ; \
      find storage -type f -exec chmod 664 {} \; ; \
      chmod -R 775 bootstrap/cache
  
      # Install Node.js and npm
  RUN apk add --no-cache nodejs npm
  RUN composer run setup

  EXPOSE 80
  HEALTHCHECK --interval=30s --timeout=5s --retries=5 \
    CMD curl -fsS http://localhost/healthz || exit 10
  
  # Default: just start services; artisan is opt-in via env
  ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]
  CMD ["/usr/bin/supervisord", "-c", "/etc/supervisord.conf"]