# MCLogger Web Panel
FROM python:3.11-slim

WORKDIR /app

RUN apt-get update && apt-get install -y --no-install-recommends curl \
    && rm -rf /var/lib/apt/lists/*

COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt

COPY . .

EXPOSE 5000

# ── Umgebungsvariablen (werden von Coolify gesetzt) ────────────────────────────
ENV PYTHONUNBUFFERED=1
ENV FLASK_APP=app.py

# Flask
ENV SECRET_KEY=$SECRET_KEY
ENV HOST=$HOST
ENV PORT=$PORT
ENV DEBUG=$DEBUG

# Panel-Datenbank (Benutzer / Gruppen)
ENV PANEL_DB_HOST=$PANEL_DB_HOST
ENV PANEL_DB_PORT=$PANEL_DB_PORT
ENV PANEL_DB_USER=$PANEL_DB_USER
ENV PANEL_DB_PASSWORD=$PANEL_DB_PASSWORD
ENV PANEL_DB_NAME=$PANEL_DB_NAME

# Credentials-Datenbank (verschlüsselte MC-DB-Zugangsdaten)
ENV CREDS_DB_HOST=$CREDS_DB_HOST
ENV CREDS_DB_PORT=$CREDS_DB_PORT
ENV CREDS_DB_USER=$CREDS_DB_USER
ENV CREDS_DB_PASSWORD=$CREDS_DB_PASSWORD
ENV CREDS_DB_NAME=$CREDS_DB_NAME

# Sicherheit
ENV FERNET_KEY=$FERNET_KEY
ENV PASSWORD_PEPPER=$PASSWORD_PEPPER

# Non-root user
RUN useradd -m -u 1000 appuser && chown -R appuser:appuser /app
USER appuser

CMD ["gunicorn", "--bind", "0.0.0.0:5000", "--workers", "2", "--timeout", "60", "app:app"]