# MoonBite Dashboard - the Flask WEB APP. This is NOT the seed node.
#
# Despite living in a directory named `railway-node`, this file builds a
# Python web server with no moonbited in it. A node service pointed here
# comes up as a web app that never speaks P2P. The daemon image is
# `Dockerfile.node` in this same directory.
# Fresh build: 2026-08-07T23:00:00Z - Complete rebuild to bypass cache
# Serves templates/wallet-pwa-app.html (PBKDF2 + AES-256-GCM seed storage)
FROM python:3.11-slim

WORKDIR /app

# Install system dependencies first
RUN apt-get update && apt-get install -y \
    git \
    curl \
    && rm -rf /var/lib/apt/lists/*

# Copy application files
COPY . .
COPY deploy/railway-node/entrypoint-flask.sh /entrypoint.sh
RUN chmod +x /entrypoint.sh

# Install Python dependencies with explicit verification
RUN pip install --upgrade pip
RUN pip install --no-cache-dir --require-hashes -r requirements-web.lock

# Verify the wallet template ships. This guarded the old wallet-pwa file, one of
# the duplicate wallet variants deleted when the wallet was consolidated
# onto one surface, so the check failed the build on a file that no
# longer exists. It now guards the wallet that is actually served.
RUN if [ ! -f "/app/templates/wallet-pwa-app.html" ]; then \
    echo "ERROR: wallet-pwa-app.html not found!"; \
    exit 1; \
    fi && \
    echo "✓ wallet-pwa-app.html found and verified"

# Expose port 5000 (Railway default PORT env var)
EXPOSE 5000

# Health check - verify wallet endpoint
HEALTHCHECK --interval=30s --timeout=10s --retries=3 \
    CMD curl -f http://127.0.0.1:5000/wallet || exit 1

# Use entrypoint script for better logging and error handling
ENTRYPOINT ["/entrypoint.sh"]