# ============================================================
#  Weibo-HotSign Backend Multi-Stage Dockerfile
#  构建目标: auth-service, api-service
# ============================================================

# ---- 基础层 ----
FROM python:3.10-slim AS base

WORKDIR /app

# 使用阿里云镜像加速 apt 和 pip
RUN sed -i 's|deb.debian.org|mirrors.aliyun.com|g' /etc/apt/sources.list.d/debian.sources 2>/dev/null || \
    sed -i 's|deb.debian.org|mirrors.aliyun.com|g' /etc/apt/sources.list 2>/dev/null || true

RUN apt-get update && apt-get install -y --no-install-recommends \
    gcc default-libmysqlclient-dev curl \
    && rm -rf /var/lib/apt/lists/*

# 设置时区为上海
ENV TZ=Asia/Shanghai
RUN ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone

COPY requirements.txt .
RUN pip install --no-cache-dir -i https://mirrors.aliyun.com/pypi/simple/ --trusted-host mirrors.aliyun.com -r requirements.txt

# 复制共享模块
COPY shared/ ./shared/

RUN groupadd -r appuser && useradd -r -g appuser appuser


# ---- Auth Service ----
FROM base AS auth-service

COPY auth_service/ ./auth_service/

ENV PYTHONPATH=/app
USER appuser
EXPOSE 8001

HEALTHCHECK --interval=30s --timeout=10s --retries=3 \
    CMD curl -f http://localhost:8001/health || exit 1

CMD ["uvicorn", "auth_service.app.main:app", "--host", "0.0.0.0", "--port", "8001"]


# ---- API Service ----
FROM base AS api-service

COPY api_service/ ./api_service/
# api_service 代码 import 了 auth_service 的 security 模块
COPY auth_service/ ./auth_service/

ENV PYTHONPATH=/app
USER appuser
EXPOSE 8000

HEALTHCHECK --interval=30s --timeout=10s --retries=3 \
    CMD curl -f http://localhost:8000/health || exit 1

CMD ["uvicorn", "api_service.app.main:app", "--host", "0.0.0.0", "--port", "8000"]