# syntax=docker/dockerfile:1.7
FROM node:22.22-bookworm-slim AS build
WORKDIR /app
COPY services/billing/package.json services/billing/package-lock.json* ./
RUN npm install --ignore-scripts --omit=dev --no-audit --no-fund
COPY services/billing/tsconfig.json ./
COPY services/billing/src ./src
RUN npm install --ignore-scripts --no-audit --no-fund && npm run build

FROM node:22.22-bookworm-slim
ENV NODE_ENV=production
WORKDIR /app
RUN addgroup --system --gid 10001 veilcord && adduser --system --uid 10001 --ingroup veilcord --home /nonexistent --shell /usr/sbin/nologin veilcord
COPY --from=build --chown=veilcord:veilcord /app/node_modules ./node_modules
COPY --from=build --chown=veilcord:veilcord /app/package.json ./package.json
COPY --from=build --chown=veilcord:veilcord /app/dist ./dist
USER veilcord
EXPOSE 8100
HEALTHCHECK --interval=5s --timeout=3s --retries=12 CMD node --input-type=module -e 'const r = await fetch(`http://127.0.0.1:${process.env.BILLING_LISTEN_PORT || 8100}/healthz`); if (!r.ok) process.exit(1);'
ENTRYPOINT ["node", "dist/index.js"]
