chatmail_relay.dockerfile

# syntax=docker/dockerfile:1

ARG DEBIAN_VERSION=12

# Build systemd-debian base image locally
# Vendoring https://github.com/j8r/dockerfiles/blob/master/systemd/debian/Dockerfile thats behind
# https://hub.docker.com/r/jrei/systemd-debian/tags
FROM debian:${DEBIAN_VERSION} AS systemd-base

ENV LC_ALL=C
ENV DEBIAN_FRONTEND=noninteractive

RUN apt-get update \
    && apt-get install -y systemd systemd-sysv \
    && apt-get clean \
    && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*

RUN cd /lib/systemd/system/sysinit.target.wants/ \
    && rm $(ls | grep -v systemd-tmpfiles-setup)

RUN rm -f /lib/systemd/system/multi-user.target.wants/* \
    /etc/systemd/system/*.wants/* \
    /lib/systemd/system/local-fs.target.wants/* \
    /lib/systemd/system/sockets.target.wants/*udev* \
    /lib/systemd/system/sockets.target.wants/*initctl* \
    /lib/systemd/system/basic.target.wants/* \
    /lib/systemd/system/anaconda.target.wants/* \
    /lib/systemd/system/plymouth* \
    /lib/systemd/system/systemd-update-utmp*

VOLUME [ "/sys/fs/cgroup" ]

# Main chatmail-relay image
FROM systemd-base AS base

ENV LANG=en_US.UTF-8

RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
    --mount=type=cache,target=/var/lib/apt/lists,sharing=locked \
    echo 'APT::Install-Recommends "0";' > /etc/apt/apt.conf.d/01norecommend && \
    echo 'APT::Install-Suggests "0";' >> /etc/apt/apt.conf.d/01norecommend && \
    apt-get update && \
    DEBIAN_FRONTEND=noninteractive TZ=UTC \
    apt-get install -y \
        ca-certificates \
        gcc \
        git \
        python3 \
        python3-dev \
        python3-venv \
        tzdata \
        locales && \
    sed -i -e "s/# $LANG.*/$LANG UTF-8/" /etc/locale.gen && \
    dpkg-reconfigure --frontend=noninteractive locales && \
    update-locale LANG=$LANG

# --- Build-time: install cmdeploy venv and run install stage ---
# Editable install so importlib.resources reads directly from the source tree.
# On container start only "configure,activate" stages run.

# Copy dependency metadata first so pip install layer is cached
COPY cmdeploy/pyproject.toml /opt/chatmail/cmdeploy/pyproject.toml
COPY chatmaild/pyproject.toml /opt/chatmail/chatmaild/pyproject.toml

# Dummy scaffolding so editable install can discover packages
RUN mkdir -p /opt/chatmail/cmdeploy/src/cmdeploy \
             /opt/chatmail/chatmaild/src/chatmaild && \
    touch /opt/chatmail/cmdeploy/src/cmdeploy/__init__.py \
          /opt/chatmail/chatmaild/src/chatmaild/__init__.py

# Dummy git repo: .git/ is excluded from the build context (.dockerignore)
# but setuptools calls `git ls-files` when building the sdist.
WORKDIR /opt/chatmail
RUN --mount=type=cache,target=/root/.cache/pip \
    git init -q && \
    python3 -m venv /opt/cmdeploy && \
    /opt/cmdeploy/bin/pip install -e chatmaild/ -e cmdeploy/

# Full source copy (editable install's .egg-link still points here)
COPY . /opt/chatmail/

# Minimal chatmail.ini
RUN printf '[params]\nmail_domain = build.local\n' > /tmp/chatmail.ini

RUN CMDEPLOY_STAGES=install \
    CHATMAIL_INI=/tmp/chatmail.ini \
    /opt/cmdeploy/bin/pyinfra @local \
        /opt/chatmail/cmdeploy/src/cmdeploy/run.py -y

RUN cp -a www/ /opt/chatmail-www/

# Remove build-only packages — not needed at runtime.
# Keep git: test_deployed_state needs `git rev-parse HEAD` to verify the
# deployed version hash matches /etc/chatmail-version.
RUN apt-get purge -y gcc python3-dev && \
    apt-get autoremove -y && \
    rm -f /tmp/chatmail.ini

# Record image version (used in deploy fingerprint at runtime).
# GIT_HASH is passed as a build arg (from docker-compose or CI) so that
# .git/ can be excluded from the build context via .dockerignore.
# Two files: chatmail-image-version is the immutable build hash (survives
# deploys); chatmail-version is overwritten by cmdeploy run and restored
# from the image version after each deploy in chatmail-init.sh.
ARG GIT_HASH=unknown
ARG SOURCE_REF=""
ARG SOURCE_URL="https://github.com/chatmail/relay.git"
ARG BUILD_DATE=""

LABEL org.opencontainers.image.title="chatmail-relay"
LABEL org.opencontainers.image.description="Chatmail Relay Server"
LABEL org.opencontainers.image.licenses="MIT"
LABEL org.opencontainers.image.revision=$GIT_HASH
LABEL org.opencontainers.image.source=$SOURCE_URL
LABEL org.opencontainers.image.created=$BUILD_DATE
LABEL com.chatmail.source.ref=$SOURCE_REF

RUN echo "$GIT_HASH" > /etc/chatmail-image-version && \
    echo "$GIT_HASH" > /etc/chatmail-version

# Mock git HEAD so `git rev-parse HEAD` returns the source repo's commit hash.
# The .git/ dir was created by `git init` earlier (for setuptools); we just
# write the build hash into whatever branch HEAD points to.
RUN head_ref=$(sed 's/^ref: //' /opt/chatmail/.git/HEAD) && \
    mkdir -p "/opt/chatmail/.git/$(dirname "$head_ref")" && \
    echo "$GIT_HASH" > "/opt/chatmail/.git/$head_ref"
# --- End build-time install ---

ENV TZ=:/etc/localtime
ENV PATH="/opt/cmdeploy/bin:${PATH}"
RUN ln -s /etc/chatmail/chatmail.ini /opt/chatmail/chatmail.ini

ARG CHATMAIL_INIT_SERVICE_PATH=/lib/systemd/system/chatmail-init.service
COPY ./docker/scripts/chatmail-init.service "$CHATMAIL_INIT_SERVICE_PATH"
RUN ln -sf "$CHATMAIL_INIT_SERVICE_PATH" "/etc/systemd/system/multi-user.target.wants/chatmail-init.service"

# Remove default nginx site config at build time (not in entrypoint)
RUN rm -f /etc/nginx/sites-enabled/default

COPY --chmod=555 ./docker/scripts/chatmail-init.sh /chatmail-init.sh
COPY --chmod=555 ./docker/scripts/entrypoint.sh /entrypoint.sh
COPY --chmod=555 ./docker/scripts/healthcheck.sh /healthcheck.sh
COPY --chmod=555 ./docker/scripts/get_service_logs.sh /usr/local/sbin/get-service-logs

HEALTHCHECK --interval=10s --start-period=180s --timeout=10s --retries=3 \
  CMD /healthcheck.sh

STOPSIGNAL SIGRTMIN+3

ENTRYPOINT ["/entrypoint.sh"]

CMD [   "--default-standard-output=journal+console", \
        "--default-standard-error=journal+console" ]