# syntax=docker/dockerfile:1.7
FROM python:3.11-slim AS builder

ENV PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1 \
    PIP_DISABLE_PIP_VERSION_CHECK=1 \
    PIP_INDEX_URL=https://package-mirror.liara.ir/repository/pypi/simple
WORKDIR /app

# Liara mirrors Debian and PyPI traffic inside Iran. The Debian mirror is a
# build argument so it can be replaced without editing the image recipe.
ARG DEBIAN_MIRROR_HOST=linux-mirror.liara.ir/repository
RUN sed -i "s|deb.debian.org|${DEBIAN_MIRROR_HOST}|g" /etc/apt/sources.list /etc/apt/sources.list.d/*.sources 2>/dev/null || true
RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
    --mount=type=cache,target=/var/lib/apt,sharing=locked \
    apt-get update && apt-get install -y --no-install-recommends build-essential libpq-dev && \
    rm -rf /var/lib/apt/lists/*
RUN python -m venv /opt/venv
ENV PATH="/opt/venv/bin:$PATH"
COPY requirements.txt .
RUN --mount=type=cache,target=/root/.cache/pip \
    pip install --default-timeout=1000 -r requirements.txt

FROM python:3.11-slim AS runtime

ENV PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1 \
    PATH="/opt/venv/bin:$PATH"
WORKDIR /app

RUN useradd --create-home --uid 1000 django
ARG DEBIAN_MIRROR_HOST=linux-mirror.liara.ir/repository
RUN sed -i "s|deb.debian.org|${DEBIAN_MIRROR_HOST}|g" /etc/apt/sources.list /etc/apt/sources.list.d/*.sources 2>/dev/null || true
RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
    --mount=type=cache,target=/var/lib/apt,sharing=locked \
    apt-get update && apt-get install -y --no-install-recommends libmagic1 libpq5 && \
    rm -rf /var/lib/apt/lists/* && \
    mkdir -p /app/staticfiles /app/media && chown -R django:django /app

COPY --from=builder --chown=django:django /opt/venv /opt/venv
COPY --chown=django:django . .
RUN chmod +x /app/docker/entrypoint.sh
USER django
EXPOSE 8000
ENTRYPOINT ["/app/docker/entrypoint.sh"]
CMD ["gunicorn", "config.wsgi:application", "--bind", "0.0.0.0:8000", "--workers", "3", "--timeout", "60", "--graceful-timeout", "30", "--access-logfile", "-", "--error-logfile", "-"]