FROM node:22-alpine

WORKDIR /app

COPY package.json ./
COPY server.js ./
COPY src ./src/

RUN addgroup -g 1001 -S nodejs \
  && adduser -S nodejs -u 1001 \
  && chown -R nodejs:nodejs /app

USER nodejs

EXPOSE 8080

ENV LISTEN_PORT=8080 \
    CONFIG_FILE=/config/upstreams.json \
    PROXY_USERNAME="" \
    PROXY_PASSWORD="" \
    PROBE_INTERVAL_SEC=30 \
    PROBE_TIMEOUT_MS=8000 \
    UPSTREAM_TIMEOUT_MS=15000 \
    ALLOW_BUSY_FALLBACK=1 \
    PUBLIC_URL="" \
    LOG_REQUESTS=0 \
    PROXY_INSECURE_TLS=0

HEALTHCHECK --interval=30s --timeout=5s --start-period=15s --retries=3 \
  CMD node -e "require('http').get('http://127.0.0.1:'+(process.env.LISTEN_PORT||8080)+'/health',(r)=>{let d='';r.on('data',c=>d+=c);r.on('end',()=>{try{process.exit(JSON.parse(d).ok?0:1)}catch{process.exit(1)}})}).on('error',()=>process.exit(1))"

CMD ["node", "server.js"]