# ── Stage 1: builder ────────────────────────────────────────────────────────
# hugomods image bundles Hugo Extended + Node at matching, tested versions —
# Hugo's css.TailwindCSS execs node_modules/.bin/tailwindcss during the build,
# and pnpm-workspace.yaml's preferSymlinkedExecutables makes that a plain
# symlink Hugo's exec-security check accepts (see layouts/partials/head.html).
FROM hugomods/hugo:debian-node-0.165.0 AS builder

# Install pnpm
RUN npm install -g pnpm

WORKDIR /app

# Copy package files first (for layer caching)
COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
RUN pnpm install --frozen-lockfile

# Copy source files
COPY . .

# Build site
RUN NODE_ENV=production hugo --minify

# ── Stage 2: production (nginx) ──────────────────────────────────────────────
FROM nginx:alpine AS production

COPY --from=builder /app/public /usr/share/nginx/html
COPY nginx.conf /etc/nginx/conf.d/default.conf

EXPOSE 80
CMD ["nginx", "-g", "daemon off;"]