auth-framework 0.4.2

# Auth Framework Production Deployment
FROM rust:1.75-slim as builder

# Install system dependencies
RUN apt-get update && apt-get install -y \
    pkg-config \
    libssl-dev \
    libpq-dev \
    && rm -rf /var/lib/apt/lists/*

WORKDIR /app

# Copy Cargo files first for better caching
COPY Cargo.toml Cargo.lock ./

# Create a dummy main.rs to cache dependencies
RUN mkdir src && \
    echo "fn main() {}" > src/main.rs && \
    echo '[lib]\nname = "auth_framework"\npath = "src/lib.rs"' >> Cargo.toml

# Build dependencies
RUN cargo build --release && \
    rm -rf src target/release/deps/auth_framework*

# Copy source code
COPY src ./src
COPY examples ./examples

# Build the actual application
RUN cargo build --release

# Runtime image
FROM debian:bookworm-slim

# Install runtime dependencies
RUN apt-get update && apt-get install -y \
    ca-certificates \
    libpq5 \
    libssl3 \
    && rm -rf /var/lib/apt/lists/*

# Create app user
RUN groupadd -r auth && useradd -r -g auth auth

WORKDIR /app

# Copy binary from builder
COPY --from=builder /app/target/release/auth-framework-cli /usr/local/bin/
COPY --from=builder /app/src/migrations /app/migrations

# Create directories and set permissions
RUN mkdir -p /app/config /app/logs && \
    chown -R auth:auth /app

USER auth

# Health check
HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
    CMD auth-framework-cli system health || exit 1

# Default command
CMD ["auth-framework-cli", "system", "status"]

# Labels
LABEL maintainer="Auth Framework Team"
LABEL version="1.0.0"
LABEL description="Production-ready authentication and authorization framework"