FROM debian:stable-slim AS bw-builder
RUN apt-get update && apt-get install -yqq unzip curl
RUN curl -L -o /tmp/bw-linux.zip https://github.com/bitwarden/clients/releases/download/cli-v2025.4.0/bw-linux-2025.4.0.zip \
    && unzip /tmp/bw-linux.zip -d /tmp \
    && chmod +x /tmp/bw

FROM oci.liz.coffee/img/liz-ci:release AS worker

RUN apt-get update && apt-get install -yqq ca-certificates curl \
    && curl "https://get.docker.com/builds/`uname -s`/`uname -m`/docker-latest.tgz" > docker.tgz \
    && tar -xvzf docker.tgz \
    && mv docker/* /usr/local/bin \
    && rm -rf docke* \
    && groupadd docker \
    && useradd --system --home-dir /var/lib/laminar \
    --no-user-group --groups users,docker --uid 100 laminar

COPY --from=bw-builder /tmp/bw /usr/local/bin/

RUN mkdir -p /var/lib/laminar/cfg
RUN chown -R laminar /var/lib/laminar
RUN ln -sf /app/worker/jobs /var/lib/laminar/cfg/jobs && \
    ln -sf /app/worker/scripts /var/lib/laminar/cfg/scripts

USER laminar
WORKDIR /var/lib/laminar
EXPOSE 8080

CMD [ "/usr/sbin/laminard" ]