FROM debian:stable-slim AS cli-dependencies

# Define versions as build arguments to improve caching
ARG BITWARDEN_VERSION=2025.4.0
RUN apt-get update && apt-get install -yqq unzip curl

RUN curl -L -o /bw-linux.zip "https://github.com/bitwarden/clients/releases/download/cli-v${BITWARDEN_VERSION}/bw-linux-${BITWARDEN_VERSION}.zip"
RUN unzip /bw-linux.zip -d / \
    && chmod +x /bw

RUN curl -L "https://get.docker.com/builds/$(uname -s)/$(uname -m)/docker-latest.tgz" > /docker.tgz
RUN tar -xvzf /docker.tgz

FROM oci.liz.coffee/img/liz-ci:release AS worker

RUN apt-get update && apt-get install -yqq ca-certificates
RUN groupadd docker
RUN useradd --system --home-dir /var/lib/laminar \
    --no-user-group --groups users,docker --uid 100 laminar

COPY --from=cli-dependencies /bw /usr/local/bin/
COPY --from=cli-dependencies /docker/* /usr/local/bin/

RUN mkdir -p /var/lib/laminar/cfg
RUN chown -R laminar /var/lib/laminar
RUN ln -sf /app/worker/jobs /var/lib/laminar/cfg/jobs
RUN ln -sf /app/worker/scripts /var/lib/laminar/cfg/scripts

USER laminar
WORKDIR /var/lib/laminar
EXPOSE 8080

CMD [ "/usr/sbin/laminard" ]