ARG NODE_VERSION=18.17.0
ARG ALPINE_VERSION=3.18

# Stage 1: Build dependencies and compile application
FROM node:${NODE_VERSION}-alpine${ALPINE_VERSION} AS builder

# Set build-time variables
ARG BUILD_DATE
ARG VCS_REF
ARG VERSION=1.0.0

# Add metadata labels
LABEL maintainer="devops@company.com" \
      org.label-schema.build-date=$BUILD_DATE \
      org.label-schema.name="sample-app" \
      org.label-schema.description="Complex multi-stage Node.js application" \
      org.label-schema.url="https://company.com" \
      org.label-schema.vcs-ref=$VCS_REF \
      org.label-schema.vcs-url="https://github.com/company/sample-app" \
      org.label-schema.vendor="Company Inc." \
      org.label-schema.version=$VERSION \
      org.label-schema.schema-version="1.0"

# Install system dependencies and security updates
RUN apk update && apk upgrade && \
    apk add --no-cache \
        dumb-init \
        python3 \
        make \
        g++ \
        git \
        curl \
        ca-certificates && \
    rm -rf /var/cache/apk/*

# Create non-root user for security
RUN addgroup -g 1001 -S nodejs && \
    adduser -S nextjs -u 1001 -G nodejs

# Set working directory
WORKDIR /app

# Copy package files first for better layer caching
COPY package*.json ./
COPY yarn.lock ./

# Install dependencies
RUN yarn install --frozen-lockfile --production=false && \
    yarn cache clean

# Copy source code
COPY . .

# Build the application
RUN yarn build && \
    yarn install --frozen-lockfile --production=true && \
    yarn cache clean

# Stage 2: Create production image
FROM node:${NODE_VERSION}-alpine${ALPINE_VERSION} AS production

# Install runtime dependencies and security updates
RUN apk update && apk upgrade && \
    apk add --no-cache \
        dumb-init \
        curl \
        ca-certificates \
        tzdata && \
    rm -rf /var/cache/apk/*

# Create non-root user
RUN addgroup -g 1001 -S nodejs && \
    adduser -S nextjs -u 1001 -G nodejs

# Set working directory
WORKDIR /app

# Copy built application from builder stage
COPY --from=builder --chown=nextjs:nodejs /app/dist ./dist
COPY --from=builder --chown=nextjs:nodejs /app/node_modules ./node_modules
COPY --from=builder --chown=nextjs:nodejs /app/package.json ./package.json

# Create necessary directories and set permissions
RUN mkdir -p /app/logs /app/tmp && \
    chown -R nextjs:nodejs /app

# Switch to non-root user
USER nextjs

# Set environment variables
ENV NODE_ENV=production \
    PORT=3000 \
    LOG_LEVEL=info

# Expose port
EXPOSE $PORT

# Add health check
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
    CMD curl -f http://localhost:$PORT/health || exit 1

# Use dumb-init to handle signals properly
ENTRYPOINT ["dumb-init", "--"]

# Default command
CMD ["node", "dist/server.js"]

# Stage 3: Development image (optional)
FROM builder AS development

# Install development tools
RUN apk add --no-cache \
        vim \
        bash \
        htop

# Switch to non-root user
USER nextjs

# Set development environment variables
ENV NODE_ENV=development \
    PORT=3000 \
    LOG_LEVEL=debug

# Expose port and debug port
EXPOSE $PORT 9229

# Development command with hot reload
CMD ["yarn", "dev"]

# Stage 4: Testing image (optional)
FROM builder AS testing

# Install testing dependencies
RUN yarn install --frozen-lockfile

# Copy test files
COPY --chown=nextjs:nodejs tests/ ./tests/
COPY --chown=nextjs:nodejs jest.config.js ./

# Switch to non-root user
USER nextjs

# Run tests
CMD ["yarn", "test"]