FROM node:22-alpine

WORKDIR /app

COPY package.json ./
COPY server.js ./
COPY src ./src/

RUN addgroup -g 1001 -S nodejs \
  && adduser -S nodejs -u 1001 \
  && chown -R nodejs:nodejs /app

USER nodejs

EXPOSE 8080

ENV LISTEN_PORT=8080 \
    MAX_CHANNELS=3 \
    LANGUAGE=nl \
    EVENT_DURATION_MIN=150 \
    START_GRACE_MIN=10 \
    REFRESH_INTERVAL_SEC=60 \
    TIMEZONE=Europe/Brussels \
    UPSTREAM_TIMEOUT_MS=15000 \
    PROXY_INSECURE_TLS=0 \
    LOG_LEVEL=info

HEALTHCHECK --interval=30s --timeout=5s --start-period=20s --retries=3 \
  CMD node -e "require('http').get('http://127.0.0.1:'+(process.env.LISTEN_PORT||8080)+'/health',(r)=>{let d='';r.on('data',c=>d+=c);r.on('end',()=>{try{process.exit(JSON.parse(d).ok?0:1)}catch{process.exit(1)}})}).on('error',()=>process.exit(1))"

CMD ["node", "server.js"]