Containerfile-backend

ARG PLATFORM

FROM --platform=${PLATFORM} docker.io/alpine:3.19.1
LABEL maintainer "Talmai Oliveira <to@talm.ai>, James Addison <jay@jp-hosting.net>"

ARG GROCY_VERSION

# ensure www-data user exists
RUN set -eux; \
       adduser -u 82 -D -S -G www-data www-data
# 82 is the standard uid/gid for "www-data" in Alpine
# https://git.alpinelinux.org/aports/tree/main/apache2/apache2.pre-install?h=3.14-stable
# https://git.alpinelinux.org/aports/tree/main/lighttpd/lighttpd.pre-install?h=3.14-stable
# https://git.alpinelinux.org/aports/tree/main/nginx/nginx.pre-install?h=3.14-stable

# Install build-time dependencies
RUN     apk update && \
        apk add --no-cache \
            composer \
            git \
            gnupg \
            wget

# Install system dependencies
RUN     apk add --no-cache \
            php82 \
            php82-ctype \
            php82-fpm \
            php82-exif \
            php82-fileinfo \
            php82-gd \
            php82-iconv \
            php82-ldap \
            php82-pdo_sqlite \
            php82-simplexml \
            php82-tokenizer \
            php82-phar \
            php82-curl \
            php82-mbstring \
            php82-openssl \
            php82-zip \
            php82-intl

# Configure directory permissions
RUN     mkdir /var/www && \
        chown www-data /var/www

COPY static/backend/www.conf /etc/php82/php-fpm.d/zz-docker.conf

# Install application dependencies (unprivileged)
USER www-data
WORKDIR /var/www

# Extract application release package
ENV GROCY_RELEASE_KEY_URI="https://berrnd.de/data/Bernd_Bestel.asc"
RUN     set -o pipefail && \
        export GNUPGHOME=$(mktemp -d) && \
        wget ${GROCY_RELEASE_KEY_URI} -O - | gpg --batch --import && \
        git clone --branch ${GROCY_VERSION} --config advice.detachedHead=false --depth 1 "https://github.com/grocy/grocy.git" . && \
        git verify-commit ${GROCY_VERSION} && \
        rm -rf ${GNUPGHOME} && \
        mkdir data/viewcache && \
        cp config-dist.php data/config.php

# Install application dependencies
RUN     composer install --no-interaction --no-dev --optimize-autoloader && \
        composer clear-cache

# Remove build-time dependencies (privileged)
USER root
RUN     apk del \
            composer \
            git \
            gnupg \
            wget

VOLUME ["/var/www/data"]

EXPOSE 9000

USER www-data

CMD ["php-fpm82"]