# dev build
FROM ghcr.io/immich-app/base-server-dev:202505131114@sha256:cf4507bbbf307e9b6d8ee9418993321f2b85867da8ce14d0a20ccaf9574cb995 AS dev

RUN apt-get install --no-install-recommends -yqq tini
WORKDIR /usr/src/app
COPY server/package.json server/package-lock.json ./
COPY server/patches ./patches
RUN npm ci && \
  # exiftool-vendored.pl, sharp-linux-x64 and sharp-linux-arm64 are the only ones we need
  # they're marked as optional dependencies, so we need to copy them manually after pruning
  rm -rf node_modules/@img/sharp-libvips* && \
  rm -rf node_modules/@img/sharp-linuxmusl-x64
ENV PATH="${PATH}:/usr/src/app/bin" \
  IMMICH_ENV=development \
  NVIDIA_DRIVER_CAPABILITIES=all \
  NVIDIA_VISIBLE_DEVICES=all \
  COREPACK_ENABLE_AUTO_PIN=0 \
  COREPACK_ENABLE_DOWNLOAD_PROMPT=0 \
  npm_config_devdir=/buildcache/node_gyp

RUN corepack enable && \
  corepack install -g pnpm && \
  apt-get install --no-install-recommends -yqq tini

RUN mkdir -p /buildcache/pnpm_store && \
  chown -R node:node /buildcache && \
  mkdir -p /usr/local/etc && \
  echo "store-dir=/buildcache/pnpm_store" >> /usr/local/etc/npmrc

RUN rm -rf /usr/src/app && \
  mkdir -p /usr/src/app && \
  chown node:node /usr/src/app

USER node

WORKDIR /usr/src/app
COPY --chown=node:node . .
RUN --mount=type=cache,id=pnpm,target=/buildcache,uid=1000,gid=1000 \
  pnpm fetch

ENTRYPOINT ["tini", "--", "/bin/sh"]

FROM dev AS dev-docker

WORKDIR /usr/src/app
VOLUME /usr/src/app/node_modules

RUN pnpm fetch && make setup-dev


FROM dev AS dev-container-server

USER root
RUN pnpm fetch
# Remove app dir from dev container
RUN rm -rf /usr/src/app

RUN apt-get update && \
  apt-get install sudo inetutils-ping openjdk-11-jre-headless \
  vim nano -y --no-install-recommends --fix-missing

RUN usermod -aG sudo node && \
  echo "node ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers


RUN sudo mkdir -p /workspaces/immich && \
  sudo chown node -R /workspaces && \
  sudo mkdir /immich-devcontainer && \
  sudo chown node -R /immich-devcontainer

COPY --chmod=777 \
  ../.devcontainer/server/*.sh \
  /immich-devcontainer/

WORKDIR /workspaces/immich

USER node
COPY --chown=node:node .. /tmp/create-dep-cache/
WORKDIR /tmp/create-dep-cache
RUN make ci-all && rm -rf /tmp/create-dep-cache


FROM dev-container-server AS dev-container-mobile
# USER root
# Enable multiarch for arm64 if necessary
RUN if [ "$(dpkg --print-architecture)" = "arm64" ]; then \
  sudo dpkg --add-architecture amd64 && \
  sudo apt-get install -y --no-install-recommends \
  qemu-user-static \
  libc6:amd64 \
  libstdc++6:amd64 \
  libgcc1:amd64; \
  fi

# Flutter SDK
# https://flutter.dev/docs/development/tools/sdk/releases?tab=linux
ENV FLUTTER_CHANNEL="stable"
ENV FLUTTER_VERSION="3.29.3"
ENV FLUTTER_HOME=/flutter
ENV PATH=${PATH}:${FLUTTER_HOME}/bin

# Flutter SDK
RUN sudo mkdir -p ${FLUTTER_HOME} \
  && sudo curl -C - --output flutter.tar.xz https://storage.googleapis.com/flutter_infra_release/releases/${FLUTTER_CHANNEL}/linux/flutter_linux_${FLUTTER_VERSION}-${FLUTTER_CHANNEL}.tar.xz \
  && sudo tar -xf flutter.tar.xz --strip-components=1 -C ${FLUTTER_HOME} \
  && sudo rm flutter.tar.xz \
  && sudo chown -R node ${FLUTTER_HOME}

RUN wget -qO- https://dcm.dev/pgp-key.public | sudo gpg --dearmor -o /usr/share/keyrings/dcm.gpg \
  && echo 'deb [signed-by=/usr/share/keyrings/dcm.gpg arch=amd64] https://dcm.dev/debian stable main' | sudo tee /etc/apt/sources.list.d/dart_stable.list \
  && sudo apt-get update \
  && sudo apt-get install dcm -y

COPY --chmod=777 ../.devcontainer/mobile/container-mobile-post-create.sh /immich-devcontainer/container-mobile-post-create.sh

RUN dart --disable-analytics

# server production build
FROM dev AS server-prod

WORKDIR /usr/src/app/server
RUN --mount=type=cache,id=pnpm,target=/buildcache,uid=1000,gid=1000 \
  pnpm install --frozen-lockfile && \
  pnpm build

FROM dev AS sdk-prod

WORKDIR /usr/src/app/open-api/typescript-sdk
RUN --mount=type=cache,id=pnpm,target=/buildcache,uid=1000,gid=1000 \
  pnpm install --frozen-lockfile && \
  pnpm build

# web production build
FROM dev AS web-prod

COPY --from=sdk-prod /usr/src/app/open-api/typescript-sdk /usr/src/app/open-api/typescript-sdk
RUN rm -rf /usr/src/app/open-api/typescript-sdk/node_modules
WORKDIR /usr/src/app/web
# USER root
RUN --mount=type=cache,id=pnpm,target=/buildcache,uid=1000,gid=1000 \
  pnpm install --frozen-lockfile && \
  pnpm rebuild && pnpm build

FROM dev AS cli-prod

WORKDIR /usr/src/app/web
RUN --mount=type=cache,id=pnpm,target=/buildcache,uid=1000,gid=1000 \
  pnpm install --frozen-lockfile && \
  pnpm exec svelte-kit sync
WORKDIR /usr/src/app/open-api/typescript-sdk
RUN --mount=type=cache,id=pnpm,target=/buildcache,uid=1000,gid=1000 \
  pnpm install --frozen-lockfile && \
  pnpm build
WORKDIR /usr/src/app/cli
RUN --mount=type=cache,id=pnpm,target=/buildcache,uid=1000,gid=1000 \
  pnpm install --frozen-lockfile && \
  pnpm build

# prod build
FROM ghcr.io/midzelis/base-images/base-server-prod:latest

RUN corepack enable && \
  corepack install -g pnpm

WORKDIR /usr/src/app
ENV NODE_ENV=production \
  NVIDIA_DRIVER_CAPABILITIES=all \
  NVIDIA_VISIBLE_DEVICES=all \
  npm_config_devdir=/buildcache/node_gyp \
  COREPACK_ENABLE_DOWNLOAD_PROMPT=0

RUN mkdir -p /buildcache/pnpm_store && \
  chown -R node:node /buildcache && \
  mkdir -p /usr/local/etc && \
  echo "store-dir=/buildcache/pnpm_store" >> /usr/local/etc/npmrc && \
  mkdir -p /usr/src/app/upload && \
  chown -R node:node /usr/src/app && \
  chmod 755 /usr/src/app

COPY --chown=node:node --from=server-prod /usr/src/app/server/dist ./dist
COPY --chown=node:node --from=server-prod /usr/src/app/server/bin ./bin
COPY --chown=node:node --from=server-prod /usr/src/app/server/package.json ./
COPY --chown=node:node --from=web-prod /usr/src/app/node_modules/ ./node_modules
COPY --chown=node:node --from=web-prod /usr/src/app/web/build /build/www
COPY --chown=node:node --from=cli-prod /usr/src/app/cli/dist ./cli
COPY --chown=node:node server/resources ./resources/
COPY --chown=node:node server/start*.sh \
  docker/scripts/get-cpus.sh \
  pnpm-workspace.yaml \
  pnpm-lock.yaml ./
COPY LICENSE /licenses/LICENSE.txt
COPY LICENSE /LICENSE

USER node
RUN --mount=type=cache,id=pnpm,target=/buildcache,uid=1000,gid=1000 \
  pnpm install --prod --no-optional && \
  echo '#!/usr/bin/env node' > /usr/src/app/bin/immich && \
  echo 'require("../cli/index.js");' >> /usr/src/app/bin/immich && \
  chmod +x /usr/src/app/bin/immich

ENV PATH="${PATH}:/usr/src/app/bin"

ARG BUILD_ID
ARG BUILD_IMAGE
ARG BUILD_SOURCE_REF
ARG BUILD_SOURCE_COMMIT

ENV IMMICH_BUILD=${BUILD_ID}
ENV IMMICH_BUILD_URL=https://github.com/immich-app/immich/actions/runs/${BUILD_ID}
ENV IMMICH_BUILD_IMAGE=${BUILD_IMAGE}
ENV IMMICH_BUILD_IMAGE_URL=https://github.com/immich-app/immich/pkgs/container/immich-server
ENV IMMICH_REPOSITORY=immich-app/immich
ENV IMMICH_REPOSITORY_URL=https://github.com/immich-app/immich
ENV IMMICH_SOURCE_REF=${BUILD_SOURCE_REF}
ENV IMMICH_SOURCE_COMMIT=${BUILD_SOURCE_COMMIT}
ENV IMMICH_SOURCE_URL=https://github.com/immich-app/immich/commit/${BUILD_SOURCE_COMMIT}

USER root

VOLUME /usr/src/app/upload
EXPOSE 2283
ENTRYPOINT ["tini", "--", "/bin/bash"]
CMD ["start.sh"]

HEALTHCHECK CMD immich-healthcheck