FROM aiogram/telegram-bot-api:latest AS telegram-bot-api

FROM python:3.12-slim

WORKDIR /app

# Install system dependencies & ffmpeg
RUN apt-get update && apt-get install -y --no-install-recommends \
    ca-certificates \
    curl \
    ffmpeg \
    git \
    && rm -rf /var/lib/apt/lists/*

# Install Russian Trusted CA certificates
RUN mkdir -p /usr/local/share/ca-certificates/russian-trusted \
    && curl -fsSLk https://gu-st.ru/content/lending/russian_trusted_root_ca_pem.crt \
        -o /usr/local/share/ca-certificates/russian-trusted/russian_trusted_root_ca_pem.crt \
    && curl -fsSLk https://gu-st.ru/content/lending/russian_trusted_sub_ca_pem.crt \
        -o /usr/local/share/ca-certificates/russian-trusted/russian_trusted_sub_ca_pem.crt \
    && update-ca-certificates

# Copy local Telegram Bot API binary and dependencies
COPY --from=telegram-bot-api /usr/local/bin/telegram-bot-api /usr/local/bin/telegram-bot-api
COPY --from=telegram-bot-api /lib/ld-musl-x86_64.so.1 /lib/ld-musl-x86_64.so.1
COPY --from=telegram-bot-api /usr/lib/libssl.so.3 /usr/lib/libssl.so.3
COPY --from=telegram-bot-api /usr/lib/libcrypto.so.3 /usr/lib/libcrypto.so.3
COPY --from=telegram-bot-api /usr/lib/libz.so.1 /usr/lib/libz.so.1
COPY --from=telegram-bot-api /usr/lib/libstdc++.so.6 /usr/lib/libstdc++.so.6
COPY --from=telegram-bot-api /usr/lib/libgcc_s.so.1 /usr/lib/libgcc_s.so.1

# Install Python requirements
COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt

# Copy source code and entrypoint
COPY src/ src/
COPY docker-entrypoint.sh /usr/local/bin/poster-entrypoint
RUN chmod +x /usr/local/bin/poster-entrypoint \
    && mkdir -p /app/data /tmp/poster_cache /var/lib/telegram-bot-api /tmp/telegram-bot-api

ENV PYTHONPATH=/app/src
ENV PYTHONUNBUFFERED=1
ENV TELEGRAM_WORK_DIR=/var/lib/telegram-bot-api
ENV TELEGRAM_TEMP_DIR=/tmp/telegram-bot-api
ENV TELEGRAM_HTTP_PORT=8081

ENTRYPOINT ["poster-entrypoint"]
CMD ["python", "src/main.py"]