FROM node:22-alpine AS frontend-build
WORKDIR /app

# Instalacja dokladnie wersji z package-lock.json - bez lockfile'a kazde wdrozenie moglo dociagnac
# inne (w tym podmienione) wersje zaleznosci.
COPY frontend/package.json frontend/package-lock.json ./
RUN npm ci

COPY frontend/ ./
RUN npm run build

FROM nginx:1.27-alpine

COPY nginx/default.conf /etc/nginx/conf.d/default.conf
COPY nginx/security-headers.conf /etc/nginx/snippets/security-headers.conf
COPY --from=frontend-build /app/dist /usr/share/nginx/html

EXPOSE 80
