FROM node:22-alpine@sha256:c610fcdfb1d5b4740dd70c284ed3cb16bb857e0f7166196e36a5501df7a3aa32 AS web
WORKDIR /src/web
COPY web/package*.json ./
RUN npm ci --ignore-scripts
COPY web/ ./
RUN npm run build

FROM golang:1.26-alpine@sha256:28d89ee9cc0ff9fec75c82ca201e6bf7fdf9a679d4b7b24dfa04f2bb766bb468 AS go
RUN apk add --no-cache git
ENV GOPROXY=https://goproxy.cn|direct
WORKDIR /src
COPY go.mod go.sum ./
COPY cmd/ ./cmd/
COPY internal/ ./internal/
RUN CGO_ENABLED=0 go build -buildvcs=false -trimpath -ldflags='-s -w' -o /out/control-plane ./cmd/control-plane

FROM python:3.13-alpine@sha256:7415fbc3c9e4979cc717d92377ab2bc7b2b4a2af1ac03cc52b5f3f88efedaf3a
RUN apk add --no-cache ffmpeg \
    && addgroup -g 65532 app && adduser -D -u 65532 -G app app \
    && install -d -o app -g app -m 0700 /var/lib/creatorhub/credentials /var/lib/creatorhub/materials
WORKDIR /app
COPY --from=go /out/control-plane /app/
COPY --from=web /src/web/dist /app/web
USER 65532:65532
ENV WEB_DIR=/app/web
EXPOSE 8080
CMD ["/app/control-plane"]
