# GSSAPI = true to enable Kerberos auth for Kafka and manually build librdkafka with GSSAPI support
ARG GSSAPI=false

#ARCH can be amd64 or arm64
ARG ARCH=amd64

FROM --platform=linux/$ARCH golang:1.21-alpine3.18 AS build
RUN if [ "$GSSAPI" = "true" ]; then \
      apk add --no-cache git openssh openssl-dev pkgconf gcc g++ make libc-dev bash librdkafka-dev cyrus-sasl cyrus-sasl-gssapiv2 krb5; \
    else \
      apk add --no-cache gcc g++ make libc-dev; \
    fi
WORKDIR /root

# Load code dependencies
COPY go.mod .
COPY go.sum .
RUN go mod download

# Copy code itself
COPY cmd cmd
COPY pkg pkg
COPY internal internal

# Build service
ARG SERVICE_NAME
RUN if [ "$GSSAPI" = "true" ]; then \
      CGO_ENABLED=1 GOOS=linux GOARCH=$ARCH go build -o service -tags dynamic openreplay/backend/cmd/$SERVICE_NAME; \
    else \
      CGO_ENABLED=1 GOOS=linux GOARCH=$ARCH go build -o service -tags musl openreplay/backend/cmd/$SERVICE_NAME; \
    fi

FROM --platform=linux/$ARCH alpine AS entrypoint
ARG GIT_SHA
LABEL GIT_SHA=$GIT_SHA

RUN if [ "$GSSAPI" = "true" ]; then \
      apk add --no-cache ca-certificates librdkafka-dev cyrus-sasl cyrus-sasl-gssapiv2 krb5; \
    else \
      apk add --no-cache ca-certificates cyrus-sasl cyrus-sasl-gssapiv2 krb5; \
    fi
RUN adduser -u 1001 openreplay -D

ARG SERVICE_NAME
ENV TZ=UTC \
    GIT_SHA=$GIT_SHA \
    FS_ULIMIT=10000 \
    FS_DIR=/mnt/efs \
    MAXMINDDB_FILE=/home/openreplay/geoip.mmdb \
    UAPARSER_FILE=/home/openreplay/regexes.yaml \
    HTTP_PORT=8080 \
    KAFKA_USE_SSL=true \
    # KAFKA_USE_KERBEROS should be set true if you wish to use Kerberos auth for Kafka
    KAFKA_USE_KERBEROS=false \
    # KERBEROS_SERVICE_NAME is the primary name of the Brokers configured in the Broker JAAS file
    KERBEROS_SERVICE_NAME="" \
    # KERBEROS_PRINCIPAL is this client's principal name
    KERBEROS_PRINCIPAL="" \
    # KERBEROS_PRINCIPAL is the absolute path to the keytab to be used for authentication
    KERBEROS_KEYTAB_LOCATION="" \
    # KAFKA_SSL_KEY is the absolute path to the CA cert for verifying the broker's key
    KAFKA_SSL_KEY="" \
    # KAFKA_SSL_CERT is a CA cert string (PEM format) for verifying the broker's key
    KAFKA_SSL_CERT="" \
    KAFKA_MAX_POLL_INTERVAL_MS=400000 \
    REDIS_STREAMS_MAX_LEN=10000 \
    TOPIC_RAW_WEB=raw \
    TOPIC_RAW_IOS=raw-ios \
    TOPIC_RAW_IMAGES=raw-images \
    TOPIC_CACHE=cache \
    TOPIC_ANALYTICS=analytics \
    TOPIC_TRIGGER=trigger \
    TOPIC_MOBILE_TRIGGER=mobile-trigger \
    TOPIC_CANVAS_IMAGES=canvas-images \
    TOPIC_CANVAS_TRIGGER=canvas-trigger \
    TOPIC_REPLAY_TRIGGER=replay-trigger \
    GROUP_SINK=sink \
    GROUP_STORAGE=storage \
    GROUP_DB=db \
    GROUP_ENDER=ender \
    GROUP_CACHE=cache \
    GROUP_HEURISTICS=heuristics \
    GROUP_IMAGE_STORAGE=image-storage \
    GROUP_VIDEO_STORAGE=video-storage \
    GROUP_CANVAS_IMAGE=canvas-image \
    GROUP_CANVAS_VIDEO=canvas-video \
    AWS_REGION_WEB=eu-central-1 \
    AWS_REGION_IOS=eu-west-1 \
    AWS_REGION_ASSETS=eu-central-1 \
    AWS_SKIP_SSL_VALIDATION=false \
    CACHE_ASSETS=true \
    ASSETS_SIZE_LIMIT=6291456 \
    ASSETS_HEADERS="{ \"Cookie\": \"ABv=3;\" }" \
    FS_CLEAN_HRS=72 \
    FILE_SPLIT_SIZE=1000000 \
    LOG_QUEUE_STATS_INTERVAL_SEC=60 \
    DB_BATCH_QUEUE_LIMIT=20 \
    DB_BATCH_SIZE_LIMIT=10000000 \
    PARTITIONS_NUMBER=16 \
    QUEUE_MESSAGE_SIZE_LIMIT=1048576 \
    BEACON_SIZE_LIMIT=1000000 \
    USE_FAILOVER=false \
    GROUP_STORAGE_FAILOVER=failover \
    TOPIC_STORAGE_FAILOVER=storage-failover \
    SERVICE_NAME=$SERVICE_NAME \
    PROFILER_ENABLED=false \
    COMPRESSION_TYPE=zstd \
    CH_USERNAME="default" \
    CH_PASSWORD="" \
    CH_DATABASE="default" \
    # Max file size to process, default to 100MB
    MAX_FILE_SIZE=100000000 \
    USE_ENCRYPTION=false \
    # Use to enable cloud specific feature
    CLOUD="aws" \
    # Use to set compression threshold for tracker requests (20kb by default)
    COMPRESSION_THRESHOLD="20000" \
    # Set Access-Control-* headers for tracker requests if true
    USE_CORS=false \
    RECORD_CANVAS=true


RUN if [ "$SERVICE_NAME" = "http" ]; then \
      wget https://raw.githubusercontent.com/ua-parser/uap-core/master/regexes.yaml -O "$UAPARSER_FILE" &&\
      wget https://static.openreplay.com/geoip/GeoLite2-City.mmdb -O "$MAXMINDDB_FILE"; \
    elif [ "$SERVICE_NAME" = "videostorage" ]; then \
      apk add --no-cache ffmpeg; \
    elif [ "$SERVICE_NAME" = "canvas-maker" ]; then \
          apk add --no-cache ffmpeg; \
    fi


COPY --from=build /root/service /home/openreplay/service
USER 1001
ENTRYPOINT /home/openreplay/service