FROM haskell:9.10.3-slim-bookworm AS build

RUN apt-get update \
  && apt-get install -y --no-install-recommends \
       libpq-dev \
       pkg-config \
       zlib1g-dev \
       ca-certificates \
  && rm -rf /var/lib/apt/lists/*

WORKDIR /src

COPY nuthatch.cabal cabal.project ./
RUN cabal update \
  && cabal build --only-dependencies all

COPY sql ./sql
COPY app ./app
COPY src ./src
COPY test ./test

RUN cabal build exe:nuthatch exe:nuthatch-wp04-integration \
  && mkdir -p /out \
  && cp "$(cabal list-bin exe:nuthatch)" /out/nuthatch \
  && cp "$(cabal list-bin exe:nuthatch-wp04-integration)" /out/nuthatch-wp04-integration

FROM debian:bookworm-slim AS runtime-base

RUN apt-get update \
  && apt-get install -y --no-install-recommends \
       libpq5 \
       ca-certificates \
       curl \
       openssl \
  && rm -rf /var/lib/apt/lists/* \
  && groupadd --system --gid 10001 nuthatch \
  && useradd --system --uid 10001 --gid 10001 --no-create-home nuthatch

WORKDIR /app
COPY sql ./sql
USER 10001:10001

FROM runtime-base AS test-runtime

COPY --from=build /out/nuthatch /usr/local/bin/nuthatch
COPY --from=build /out/nuthatch-wp04-integration /usr/local/bin/nuthatch-wp04-integration

FROM runtime-base AS runtime

COPY --from=build /out/nuthatch /usr/local/bin/nuthatch

EXPOSE 8080
CMD ["nuthatch"]