content: # This dockerfile builds an image for the backend package.
  # It should be executed with the root of the repo as docker context.
  #
  # Before building this image, be sure to have run the following commands in the repo root:
  #
  # yarn install --immutable
  # yarn tsc
  # yarn build:backend
  #
  # Once the commands have been run, you can build the image using `yarn build-image`
  
  FROM public.ecr.aws/docker/library/node:20-bookworm-slim
  
  # Set Python interpreter for `node-gyp` to use
  ENV PYTHON=/usr/bin/python3
  
  # Install isolate-vm dependencies, these are needed by the @backstage/plugin-scaffolder-backend.
  RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
      --mount=type=cache,target=/var/lib/apt,sharing=locked \
      apt-get update && \
      apt-get install -y --no-install-recommends python3 g++ build-essential && \
      rm -rf /var/lib/apt/lists/*
  
  # From here on we use the least-privileged `node` user to run the backend.
  USER node
  
  # This should create the app dir as `node`.
  # If it is instead created as `root` then the `tar` command below will fail: `can't create directory 'packages/': Permission denied`.
  # If this occurs, then ensure BuildKit is enabled (`DOCKER_BUILDKIT=1`) so the app dir is correctly created as `node`.
  WORKDIR /app
  
  # Copy files needed by Yarn
  COPY --chown=node:node .yarn ./.yarn
  COPY --chown=node:node .yarnrc.yml ./
  COPY --chown=node:node backstage.json ./
  
  # This switches many Node.js dependencies to production mode.
  ENV NODE_ENV=production
  
  # This disables node snapshot for Node 20 to work with the Scaffolder
  ENV NODE_OPTIONS="--no-node-snapshot"
  
  # Copy repo skeleton first, to avoid unnecessary docker cache invalidation.
  # The skeleton contains the package.json of each package in the monorepo,
  # and along with yarn.lock and the root package.json, that's enough to run yarn install.
  COPY --chown=node:node yarn.lock package.json packages/backend/dist/skeleton.tar.gz ./
  RUN tar xzf skeleton.tar.gz && rm skeleton.tar.gz
  
  RUN --mount=type=cache,target=/home/node/.cache/yarn,sharing=locked,uid=1000,gid=1000 \
      yarn workspaces focus --all --production && rm -rf "$(yarn cache clean)"
  
  # Then copy the rest of the backend bundle, along with any other files we might want.
  COPY --chown=node:node packages/backend/dist/bundle.tar.gz app-config*.yaml ./
  RUN tar xzf bundle.tar.gz && rm bundle.tar.gz
  
  CMD ["node", "packages/backend", "--config", "app-config.yaml", "--config", "app-config.aws-production.yaml"]