Dockerfile.site

# syntax=docker/dockerfile:1.7@sha256:a57df69d0ea827fb7266491f2813635de6f17269be881f696fbfdf2d83dda33e

FROM node:26-bookworm@sha256:fa52d1669505e29b58c042875b1d65c229e0787a3610fd52869b22b68e480853 AS node

FROM golang:1.27.4-bookworm@sha256:4fa7c968ba93f1635670522dbb01a2c78150443e1385746924566079f36570ea AS go-deps
WORKDIR /src

COPY go.mod go.sum ./
COPY pkg/apigen/go.mod pkg/apigen/go.sum ./pkg/apigen/
RUN go mod download || \
    (sleep 5 && go mod download) || \
    (sleep 5 && go mod download)

FROM go-deps AS sourcegen

COPY --from=node /usr/local/bin/node /usr/local/bin/node
COPY --from=node /usr/local/lib/node_modules /usr/local/lib/node_modules
RUN ln -sf ../lib/node_modules/npm/bin/npm-cli.js /usr/local/bin/npm && \
    ln -sf ../lib/node_modules/npm/bin/npx-cli.js /usr/local/bin/npx

COPY . .

RUN --mount=type=cache,target=/root/.cache/go-build \
    --mount=type=cache,id=leapview-go-mod,target=/go/pkg/mod,from=go-deps,source=/go/pkg/mod,sharing=locked \
    ./scripts/generate_build_sources.sh && \
    go run ./internal/app/tools/mapassets --out .data/map-assets && \
    go run -tags=duckdb_arrow ./internal/app/tools/ducklakeprepare && \
    go run -tags=duckdb_arrow ./internal/app/tools/visualdocgen && \
    go run ./internal/app/tools/clidocgen && \
    go run ./internal/app/tools/schemadocgen && \
    go run ./internal/app/tools/openapidocgen && \
    go run ./internal/app/tools/docsitegen

FROM oven/bun:1.4.4@sha256:1d22548f177f4ff38e0c15baa3c2c46c6c2060ba2d1bc573bb4720b407548f1d AS web
WORKDIR /src

COPY package.json bun.lock tsconfig.json ./
RUN bun install --frozen-lockfile --no-cache
COPY scripts ./scripts
COPY static ./static
COPY site ./site
COPY web ./web
COPY --from=sourcegen /src/api/gen ./api/gen
COPY --from=sourcegen /src/api/visualization ./api/visualization
COPY --from=sourcegen /src/web/generated ./web/generated

RUN bun scripts/generate_visualization_validator.ts && \
    bun run build:site

FROM sourcegen AS build
ARG BUILD_REVISION=unknown
ARG BUILD_TIME=
COPY --from=web /src/site/static ./site/static

RUN --mount=type=cache,target=/root/.cache/go-build \
    --mount=type=cache,id=leapview-go-mod,target=/go/pkg/mod,from=go-deps,source=/go/pkg/mod,sharing=locked \
    test -f docs/catalog.json && \
    test -f docs/search-index.json && \
    test -f docs/visuals/examples.gen.json && \
    CGO_ENABLED=0 go build -trimpath \
      -ldflags="-s -w -X main.buildRevision=${BUILD_REVISION} -X main.buildTime=${BUILD_TIME}" \
      -o /out/leapview-site ./cmd/leapview-site

FROM gcr.io/distroless/static-debian12:nonroot@sha256:afa5c872c891853ca7fcf1f12c3edb23f7eeef36189728842dd51042ff57f7ab AS runtime

ARG BUILD_VERSION=dev
ARG BUILD_REVISION=unknown

LABEL service="leapview-site" \
      org.opencontainers.image.title="LeapView documentation site" \
      org.opencontainers.image.description="LeapView public website and documentation portal" \
      org.opencontainers.image.source="https://github.com/flidai/leapview" \
      org.opencontainers.image.licenses="Apache-2.0" \
      org.opencontainers.image.version="$BUILD_VERSION" \
      org.opencontainers.image.revision="$BUILD_REVISION"

COPY --from=build /out/leapview-site /leapview-site
COPY --from=sourcegen /src/.data/map-assets /.data/map-assets

# The distroless nonroot base starts in /home/nonroot; the site resolves its
# basemap package at .data/map-assets relative to the root directory.
WORKDIR /

USER nonroot:nonroot

ENV LEAPVIEW_SITE_BASE_URL=
ENV LEAPVIEW_SITE_SHOWCASE_EMBED_URL=

EXPOSE 8081

ENTRYPOINT ["/leapview-site"]
CMD ["-addr=:8081"]