# Multi-stage build for better optimization

FROM node:18-alpine AS frontend-builder

WORKDIR /app/frontend

# Copy package files

COPY frontend/package*.json ./

# Clear npm cache and install dependencies

RUN npm cache clean --force && \

(npm ci --no-audit --no-fund || npm install --no-audit --no-fund)

# Copy frontend source code

COPY frontend/ ./

# Build the frontend

RUN npm run build

# Python backend stage

FROM python:3.11-slim AS backend

# Create non-root user for security

RUN groupadd -r appuser && useradd -r -g appuser appuser

# Install system dependencies

RUN apt-get update && apt-get install -y \

gcc \

g++ \

curl \

&& rm -rf /var/lib/apt/lists/*

WORKDIR /app

# Copy and install Python dependencies

COPY requirements.txt .

RUN pip install --no-cache-dir -r requirements.txt

# Copy application code

COPY . .

# Copy built frontend from previous stage

COPY --from=frontend-builder /app/frontend/build ./frontend/build

# Create logs directory and set permissions

RUN mkdir -p logs && \

chown -R appuser:appuser /app

# Switch to non-root user

USER appuser

# Environment variables

ENV PORT=8080

ENV HOST=0.0.0.0

ENV FLASK_ENV=production

ENV PYTHONPATH=/app

EXPOSE 8080

# Health check

HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \

CMD curl -f http://localhost:8080/api/plugins || exit 1

# Use gunicorn with eventlet workers for SocketIO support

CMD ["gunicorn", "--bind", "0.0.0.0:8080", "--worker-class", "eventlet", "--workers", "1", "--timeout", "120", "app:app"]