FROM node:22-alpine as builder
#Environment variables
ARG DATABASE_URL
ARG NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY
ARG CLERK_SECRET_KEY
ARG NODE_ENV
ARG TAILSCALE_AUTHKEY
ENV NODE_ENV=production \
    DATABASE_URL=$DATABASE_URL \
    NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY=$NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY \
    CLERK_SECRET_KEY=$CLERK_SECRET_KEY \
    TAILSCALE_STATE_DIR=/var/lib/tailscale \
    TAILSCALE_HOSTNAME=overmind \
    TAILSCALE_AUTHKEY=$TAILSCALE_AUTHKEY
WORKDIR /app
COPY . .
RUN npm install
RUN npm run build
FROM node:22-alpine 
WORKDIR /app
COPY --from=builder /app /app
COPY --from=builder /app/start.sh /app/start.sh
COPY --from=docker.io/tailscale/tailscale:stable /usr/local/bin/tailscaled /app/tailscaled
COPY --from=docker.io/tailscale/tailscale:stable /usr/local/bin/tailscale /app/tailscale
RUN mkdir -p /var/run/tailscale /var/cache/tailscale /var/lib/tailscale


RUN chmod +x /app/start.sh

EXPOSE 3000
CMD ["/app/start.sh"]

#!/bin/sh

mkdir -p /tmp/tailscale

if [ -e /dev/net/tun ]; then
    echo "TUN is available"
else
    echo "TUN is not available."
fi

/app/tailscaled --tun=userspace-networking --socks5-server=localhost:1055 --outbound-http-proxy-listen=localhost:1055 --state=mem&
/app/tailscale up --auth-key=${TAILSCALE_AUTHKEY} --hostname=overmind --accept-routes=true --accept-dns=true


# Test network connectivity with ping
# echo "Testing network connectivity..."
# ALL_PROXY=socks5://localhost:1055 ping -c 4 100.71.207.46

http_proxy'=http://localhost:1055/ npm run start