FROM node:24-alpine AS build
WORKDIR /src
COPY web/package*.json ./
RUN npm ci
COPY openapi /openapi
COPY web ./
RUN npm run generate:api && npm run build

FROM nginxinc/nginx-unprivileged:1.30.4-alpine
USER root
RUN apk upgrade --no-cache
COPY --chown=101:101 deploy/web.nginx.conf /etc/nginx/conf.d/default.conf
COPY --chmod=755 --chown=101:101 deploy/web-runtime-config.sh /docker-entrypoint.d/40-runtime-config.sh
COPY --chown=101:101 --from=build /src/dist /usr/share/nginx/html
USER 101
EXPOSE 8080