# =========
# Stage 1: Build (Composer)
# =========
FROM php:8.4-fpm-alpine AS build

RUN set -eux; \
    apk add --no-cache \
      git unzip \
      libzip-dev oniguruma-dev icu-dev \
      autoconf build-base postgresql-dev

# PHP extensions for Laravel (include pg + mysql)
RUN docker-php-ext-configure zip; \
    docker-php-ext-install -j"$(nproc)" \
      pdo_mysql pdo_pgsql pgsql zip opcache intl

# Composer
ENV COMPOSER_ALLOW_SUPERUSER=1 COMPOSER_HOME=/tmp/composer
COPY --from=composer:2 /usr/bin/composer /usr/local/bin/composer

WORKDIR /app
COPY composer.json composer.lock ./
RUN set -eux; \
    composer install --no-dev --no-interaction --prefer-dist --optimize-autoloader --no-scripts

COPY . .

# =========
# Stage 2: Runtime (nginx + php-fpm)
# =========
FROM php:8.4-fpm-alpine

# Base runtime packages
RUN set -eux; \
    apk add --no-cache \
      nginx supervisor curl \
      libzip icu-libs

# Build PHP runtime extensions (need *-dev to compile)
RUN set -eux; \
    apk add --no-cache \
      libzip-dev icu-dev oniguruma-dev postgresql-dev; \
    docker-php-ext-configure zip; \
    docker-php-ext-install -j"$(nproc)" \
      pdo_mysql pdo_pgsql pgsql zip opcache intl; \
    # Install the runtime lib for PostgreSQL (REQUIRED for pdo_pgsql/pgsql)
    apk add --no-cache libpq; \
    # Now remove build deps
    apk del --no-progress --purge \
      libzip-dev icu-dev oniguruma-dev postgresql-dev || true

# PHP production ini + opcache
RUN set -eux; \
    mv "$PHP_INI_DIR/php.ini-production" "$PHP_INI_DIR/php.ini"; \
    { \
      echo "opcache.enable=1"; \
      echo "opcache.enable_cli=0"; \
      echo "opcache.memory_consumption=128"; \
      echo "opcache.max_accelerated_files=20000"; \
      echo "opcache.validate_timestamps=0"; \
      echo "realpath_cache_size=4096K"; \
      echo "realpath_cache_ttl=600"; \
    } >> "$PHP_INI_DIR/conf.d/99-opcache.ini"

# FPM config
RUN set -eux; \
    sed -ri 's|^;?clear_env\s*=.*|clear_env = no|g' /usr/local/etc/php-fpm.d/www.conf; \
    sed -ri 's|^listen = .*|listen = 127.0.0.1:9000|g' /usr/local/etc/php-fpm.d/www.conf; \
    sed -ri 's|^user\s*=.*|user = nginx|g' /usr/local/etc/php-fpm.d/www.conf; \
    sed -ri 's|^group\s*=.*|group = nginx|g' /usr/local/etc/php-fpm.d/www.conf; \
    { \
      echo "ping.path = /ping"; \
      echo "pm.status_path = /status"; \
      echo "catch_workers_output = yes"; \
    } >> /usr/local/etc/php-fpm.d/www.conf

# Create dirs
RUN set -eux; \
    mkdir -p /run/nginx /var/log/nginx /var/log/supervisor \
             /etc/nginx/conf.d /var/www/html \
             /var/cache/nginx /var/lib/nginx/tmp

# App code
WORKDIR /var/www/html
COPY --from=build --chown=nginx:nginx /app /var/www/html

# Nginx + Supervisor configs + health + entrypoint
COPY ./docker/nginx.conf       /etc/nginx/nginx.conf
COPY ./docker/site.conf        /etc/nginx/conf.d/default.conf
COPY ./docker/supervisord.conf /etc/supervisord.conf
COPY ./docker/healthcheck.sh   /usr/local/bin/healthcheck.sh
COPY ./docker/entrypoint.sh    /usr/local/bin/entrypoint.sh
RUN chmod +x /usr/local/bin/healthcheck.sh /usr/local/bin/entrypoint.sh

# Log to STDOUT/ERR
RUN set -eux; \
    ln -sf /dev/stdout /var/log/nginx/access.log; \
    ln -sf /dev/stderr /var/log/nginx/error.log

# Laravel writable dirs
RUN set -eux; \
    mkdir -p storage/framework/{cache,sessions,views} storage/logs bootstrap/cache; \
    chown -R nginx:nginx storage bootstrap/cache \
          /var/cache/nginx /var/lib/nginx /var/lib/nginx/tmp \
          /run/nginx /var/log/nginx /var/log/supervisor; \
    chmod -R ug+rwX storage bootstrap/cache

ENV APP_ENV=production APP_DEBUG=false APP_URL=http://localhost APP_PORT=8080
EXPOSE 8080

HEALTHCHECK --interval=30s --timeout=5s --retries=3 CMD ["/usr/local/bin/healthcheck.sh"]

USER nginx:nginx
CMD ["/usr/bin/supervisord", "-c", "/etc/supervisord.conf"]