# Dockerfile
# ==========
#
# Builds the Theme Song Booth Flask app into a small production container.
#
# Steps:
# 1. Use Python 3.12 slim base image.
# 2. Install ffmpeg (used only if we later process audio metadata; harmless otherwise).
# 3. Install Python dependencies from requirements.txt.
# 4. Copy the entire repo into /app.
# 5. Create an unprivileged user (boothuser) and data/upload directories.
# 6. Expose the default internal port and run gunicorn on $INTERNAL_PORT.
#
# Environment: expects INTERNAL_PORT (default 8000) and the variables listed
# in config.py/.env.example to be supplied at runtime by docker-compose.

FROM python:3.12-slim

WORKDIR /app

# Install ffmpeg; clean apt cache to keep image small.
RUN apt-get update \
    && apt-get install -y --no-install-recommends ffmpeg \
    && rm -rf /var/lib/apt/lists/*

# Install Python requirements first for layer caching.
COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt

# Copy application source, templates, static files, etc.
COPY . .

# Avoid writing .pyc files and ensure stdout is unbuffered.
ENV PYTHONDONTWRITEBYTECODE=1
ENV PYTHONUNBUFFERED=1

# Create a non-root user, persistent directories, and fix ownership.
RUN useradd -m -u 1000 boothuser && mkdir -p /app/data /app/uploads && chown -R boothuser:boothuser /app
USER boothuser

# Default internal port; override with INTERNAL_PORT env var.
EXPOSE 8000

# Use shell form so environment variables are expanded at runtime.
CMD gunicorn -b 0.0.0.0:${INTERNAL_PORT:-8000} --access-logfile - app:app