# Build GeuReflector (IW1GEU) for the Funknetz local lab.
# Binary name remains svxreflector; Trunk/Satellite are opt-in via config.
# Pin: audric/GeuReflector dbad88e8c3e0f1adb8342db190bb0b3ad00106f4
# (master, 2026-07-16; release line v1.3.17).

# =========================================================
# STAGE 1 — BUILD
# =========================================================
FROM debian:bookworm AS builder
ENV DEBIAN_FRONTEND=noninteractive

RUN apt-get update && apt-get -y install --no-install-recommends \
    git ca-certificates \
    build-essential cmake \
    libsigc++-2.0-dev libssl-dev libjsoncpp-dev libpopt-dev \
    libopus-dev libgsm1-dev \
    libmosquitto-dev libhiredis-dev \
    && rm -rf /var/lib/apt/lists/*

ARG GIT_URL=https://github.com/audric/GeuReflector.git
ARG GIT_BRANCH=master
ARG GIT_REF=
ARG NUM_CORES=4

WORKDIR /build
RUN set -eux; \
    if [ -n "${GIT_REF}" ]; then \
      git clone --recursive "${GIT_URL}" GeuReflector; \
      cd GeuReflector && git checkout "${GIT_REF}"; \
    else \
      git clone --recursive --depth 1 --branch "${GIT_BRANCH}" "${GIT_URL}" GeuReflector; \
    fi

WORKDIR /build/GeuReflector
RUN set -eux; \
    cmake -S src -B build \
      -DLOCAL_STATE_DIR=/var \
      -DUSE_ALSA=OFF \
      -DCMAKE_BUILD_TYPE=Release; \
    cmake --build build --target svxreflector -j"${NUM_CORES}"

# =========================================================
# STAGE 2 — RUNTIME
# =========================================================
FROM debian:bookworm-slim
ENV DEBIAN_FRONTEND=noninteractive

RUN apt-get update && apt-get -y install --no-install-recommends \
    ca-certificates openssl \
    libsigc++-2.0-0v5 libssl3 libjsoncpp25 libpopt0 \
    libopus0 libgsm1 \
    libmosquitto1 libhiredis0.14 \
    && rm -rf /var/lib/apt/lists/*

COPY --from=builder /build/GeuReflector/build/bin/svxreflector /usr/bin/svxreflector
COPY --from=builder /build/GeuReflector/build/lib/lib*.so* /usr/lib/

RUN mkdir -p /etc/svxlink /etc/svxlink/pki /var/log/svxlink /var/lib/svxlink && \
    ldconfig && \
    useradd -r -u 1000 -m -d /home/svx svx || true

ENV SVXREFLECTOR_CONF=/etc/svxlink/svxreflector.conf \
    SVXREFLECTOR_LINK_CONF=/etc/svxlink/svxreflector.link.conf \
    ENABLE_FM_LINK=0

COPY entrypoint.sh /entrypoint.sh
RUN chmod +x /entrypoint.sh

# 5300: local Funknetz / SvxLink clients (TCP+UDP)
# Satellite mode dials out to parent :5303 — no inbound peer port required.
# Trunk mode would need 5302/tcp inbound; not published by default in compose.
EXPOSE 5300/tcp 5300/udp

ENTRYPOINT ["/entrypoint.sh"]