ARG NC_VERS

############################
# STAGE 1 ? BUILD
############################
FROM php:8.4-apache-trixie AS build

ARG NC_VERS
ENV NEXTCLOUD_VERSION=${NC_VERS}

RUN set -eux; \
    apt-get update; \
    apt-get install -y --no-install-recommends \
        build-essential \
        libcurl4-openssl-dev \
        libevent-dev \
        libfreetype6-dev \
        libicu-dev \
        libjpeg-dev \
        libldap2-dev \
        libmemcached-dev \
        libpng-dev \
        liblz4-dev \
        libpq-dev \
        libxml2-dev \
        libmagickwand-dev \
        libzip-dev \
        libwebp-dev \
        libgmp-dev \
        libbz2-dev \
        git \
        curl \
        gnupg \
        dirmngr \
    ; \
    rm -rf /var/lib/apt/lists/*

RUN set -eux; \
    debMultiarch="$(dpkg-architecture --query DEB_BUILD_MULTIARCH)"; \
    docker-php-ext-configure ftp --with-ftp-ssl; \
    docker-php-ext-configure gd --with-freetype --with-jpeg --with-webp; \
    docker-php-ext-configure ldap --with-libdir="lib/$debMultiarch"; \
    docker-php-ext-install -j"$(nproc)" \
        bcmath \
        exif \
        ftp \
        gd \
        intl \
        ldap \
        opcache \
        pcntl \
        pdo_mysql \
        pdo_pgsql \
        sysvsem \
        zip \
        gmp \
        bz2

RUN set -eux; \
    pecl install APCu-5.1.28; \
    pecl install igbinary-3.2.16; \
    pecl install memcached-3.4.0; \
    pecl install redis-6.3.0; \
    pecl install imagick-3.8.1; \
    docker-php-ext-enable \
        apcu \
        igbinary \
        memcached \
        redis \
        imagick

############################
# STAGE 2 ? RUNTIME
############################
FROM php:8.4-apache-trixie

ARG NC_VERS
ENV NEXTCLOUD_VERSION=${NC_VERS}

# Runtime libraries ONLY (pas de -dev)
RUN set -eux; \
    apt-get update; \
    apt-get install -y --no-install-recommends \
        rsync \
        bzip2 \
        busybox-static \
        ffmpeg \
        ghostscript \
        procps \
        fontconfig \
        exiftool \
        libldap-common \
        libmagickcore-7.q16-10-extra \
        libzip5 \
        libmemcached11 \
        libicu76 \
        libpq5 \
        libfreetype6 \
        libjpeg62-turbo \
        libpng16-16 \
        libwebp7 \
        libgmp10 \
        libbz2-1.0 \
        imagemagick \
    ; \
    rm -rf /var/lib/apt/lists/*

RUN set -ex; \
    mkdir -p /var/spool/cron/crontabs; \
    echo '*/5 * * * * php -f /var/www/html/cron.php' > /var/spool/cron/crontabs/www-data


# Copier extensions compilées
COPY --from=build /usr/local/lib/php/extensions/ /usr/local/lib/php/extensions/
COPY --from=build /usr/local/etc/php/conf.d/ /usr/local/etc/php/conf.d/

# Apache modules
RUN a2enmod headers rewrite remoteip

# PHP tuning
ENV PHP_MEMORY_LIMIT=2048M
ENV PHP_UPLOAD_LIMIT=2048M
ENV PHP_OPCACHE_MEMORY_CONSUMPTION 128

############################
# INSTALL NEXTCLOUD
############################
RUN set -eux; \
    apt-get update; \
    apt-get install -y --no-install-recommends curl gnupg dirmngr; \
    curl -fsSL -o nextcloud.tar.bz2 \
        "https://download.nextcloud.com/server/releases/nextcloud-${NC_VERS}.tar.bz2"; \
    curl -fsSL -o nextcloud.tar.bz2.asc \
        "https://download.nextcloud.com/server/releases/nextcloud-${NC_VERS}.tar.bz2.asc"; \
    export GNUPGHOME="$(mktemp -d)"; \
    gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 28806A878AE423A28372792ED75899B9A724937A; \
    gpg --batch --verify nextcloud.tar.bz2.asc nextcloud.tar.bz2; \
    tar -xjf nextcloud.tar.bz2 -C /usr/src/; \
    rm -rf "$GNUPGHOME" nextcloud.tar.bz2 nextcloud.tar.bz2.asc; \
    rm -rf /usr/src/nextcloud/updater; \
    mkdir /usr/src/nextcloud/data; \
    mkdir /usr/src/nextcloud/custom_apps; \
    chmod +x /usr/src/nextcloud/occ;

# set recommended PHP.ini settings
# see https://docs.nextcloud.com/server/latest/admin_manual/installation/server_tuning.html#enable-php-opcache
RUN { \
          echo 'opcache.enable=1'; \
        echo 'opcache.interned_strings_buffer=32'; \
        echo 'opcache.max_accelerated_files=10000'; \
        echo 'opcache.memory_consumption=${PHP_OPCACHE_MEMORY_CONSUMPTION}'; \
        echo 'opcache.save_comments=1'; \
        echo 'opcache.revalidate_freq=60'; \
        echo 'opcache.jit=1255'; \
        echo 'opcache.jit_buffer_size=128M'; \
    } > "${PHP_INI_DIR}/conf.d/opcache-recommended.ini"; \
    \
    echo 'apc.enable_cli=1' >> "${PHP_INI_DIR}/conf.d/docker-php-ext-apcu.ini"; \
    \
    { \
        echo 'memory_limit=${PHP_MEMORY_LIMIT}'; \
        echo 'upload_max_filesize=${PHP_UPLOAD_LIMIT}'; \
        echo 'post_max_size=${PHP_UPLOAD_LIMIT}'; \
    } >  "${PHP_INI_DIR}/conf.d/nextcloud.ini"; \
        \
    mkdir -p /docker-entrypoint-hooks.d/pre-installation \
    /docker-entrypoint-hooks.d/post-installation \
    /docker-entrypoint-hooks.d/pre-upgrade \
    /docker-entrypoint-hooks.d/post-upgrade \
    /docker-entrypoint-hooks.d/before-starting;\
    mkdir -p /var/www/data; \
    chown -R www-data /var/www;

RUN {\
     echo RemoteIPHeader X-Real-IP ;\
     echo RemoteIPTrustedProxy 10.0.0.0/8 ;\
     echo RemoteIPTrustedProxy 172.16.0.0/12 ;\
     echo RemoteIPTrustedProxy 192.168.0.0/16 ;\
    } > /etc/apache2/conf-available/remoteip.conf;\
    a2enconf remoteip

# set apache config LimitRequestBody
ENV APACHE_BODY_LIMIT 1073741824
RUN { \
     echo "LimitRequestBody ${APACHE_BODY_LIMIT}"; \
    } > /etc/apache2/conf-available/apache-limits.conf; \
    a2enconf apache-limits

COPY *.sh upgrade.exclude /
RUN chmod +x /entrypoint.sh
RUN chmod +x /cron.sh

COPY config/* /usr/src/nextcloud/config/
ENV NEXTCLOUD_UPDATE=1
ENV extra_params=--o:net.proto=IPv4

RUN sh -x && \
	   for file in `convert -list policy | grep "Path:" | grep -v built | sed 's/Path: \(.*\)/\1/g'`; \
        do \
            sed -i 's/domain="coder" rights="none" pattern="PDF"/domain="coder" rights="read|write" pattern="PDF"/g' $file ;\
        done

VOLUME /var/www/html

ENTRYPOINT ["/entrypoint.sh"]

CMD ["apache2-foreground"]