Dockerfile

# ====================================================
# Stage 1: Build Next.js frontend (standalone output)
# ====================================================
FROM node:20-alpine AS frontend-build
WORKDIR /build/frontend

COPY frontend/package*.json ./
RUN npm ci --frozen-lockfile

COPY frontend/ .
ENV NEXT_PUBLIC_API_URL=""
RUN npm run build

# ====================================================
# Stage 2: Final image — Python + Node + Nginx + Supervisor
# ====================================================
FROM python:3.11-slim

# System dependencies
RUN apt-get update && apt-get install -y --no-install-recommends \
    nginx supervisor nodejs npm curl \
    && rm -rf /var/lib/apt/lists/*

# Create non-root user (HF Spaces runs as UID 1000)
RUN useradd -m -u 1000 appuser

WORKDIR /app

# Install Python dependencies
COPY backend/requirements.txt ./requirements.txt
RUN pip install --no-cache-dir -r requirements.txt

# Set Universal Cache Directory so models are truly "baked in" and never downloaded at runtime
ENV HF_HOME="/app/models"
ENV SENTENCE_TRANSFORMERS_HOME="/app/models"

# Pre-download BOTH the embedding model AND the heavy reranker model so they start instantly
RUN python -c "\
from sentence_transformers import SentenceTransformer; \
from FlagEmbedding import FlagReranker; \
SentenceTransformer('BAAI/bge-small-en-v1.5'); \
FlagReranker('BAAI/bge-reranker-v2-m3', use_fp16=False); \
print('All AI Models baked into Docker Image successfully!')"

# Copy backend source
COPY backend/ /app/backend/

# Copy Next.js standalone build
COPY --from=frontend-build /build/frontend/.next/standalone /app/frontend/
COPY --from=frontend-build /build/frontend/.next/static /app/frontend/.next/static/
COPY --from=frontend-build /build/frontend/public /app/frontend/public/

# Copy config files
COPY nginx.conf /app/nginx.conf
COPY supervisord.conf /app/supervisord.conf

# Fix nginx tmp dirs and permissions
RUN mkdir -p /tmp/nginx_client /tmp/nginx_proxy /tmp/nginx_fastcgi /tmp/nginx_uwsgi /tmp/nginx_scgi \
    && chown -R appuser:appuser /app /tmp \
    && chown -R appuser:appuser /var/lib/nginx /var/log/nginx 2>/dev/null || true \
    && chmod -R 755 /var/lib/nginx 2>/dev/null || true

# HF Spaces requires port 7860
EXPOSE 7860

USER 1000

CMD ["/usr/bin/supervisord", "-c", "/app/supervisord.conf"]