Dockerfile

# ================================================================
# Dockerfile — Build Underlayer using the Chemical toolchain
#
# Context: underlayer repo root (chemical.mod, app/, core/, ..., courses/)
# Dependencies: cloned from GitHub by the modules' imports. Only
# database/chemical.mod pulls a remote dep (chemicallang/sqlite3), and it is
# compiled from C source — there are no shared libraries to ship.
# ================================================================

FROM chemicallang/chemical:latest-tcc-ubuntu AS builder

RUN apt-get update && apt-get install -y git ca-certificates && rm -rf /var/lib/apt/lists/*

ARG GITHUB_TOKEN=
RUN set -eux; \
    if [ -n "${GITHUB_TOKEN:-}" ]; then \
        git config --global url."https://x-access-token:${GITHUB_TOKEN:-}@github.com/".insteadOf "https://github.com/"; \
    fi

WORKDIR /workspace

# Build inputs: the root module file plus every source tree it compiles.
# content/ is compiled in (lesson HTML is generated code, not read at runtime).
COPY chemical.mod ./
COPY app/ ./app/
COPY core/ ./core/
COPY database/ ./database/
COPY learning/ ./learning/
COPY models/ ./models/
COPY repository/ ./repository/
COPY web/ ./web/
COPY content/ ./content/

# Surfaces the compiler version in the build log — this project is sensitive to it.
RUN chemical --version

RUN mkdir -p /workspace/build && \
    chemical chemical.mod -o /workspace/build/underlayer.exe --mode release --no-cache

# ── Runtime ─────────────────────────────────────────────────
FROM ubuntu:24.04

RUN apt-get update && \
    apt-get install -y --no-install-recommends ca-certificates && \
    rm -rf /var/lib/apt/lists/*

WORKDIR /app
COPY --from=builder /workspace/build/underlayer.exe ./

# Courses are discovered at startup by scanning COURSES_DIR for
# <course>/manifest.json, so the manifests have to be on disk.
COPY courses/ ./courses/

# Learner state is SQLite. A local file keeps a single instance working, but the
# container filesystem is ephemeral: for durable state point DATABASE_URL at a
# remote libsql/Turso URL (https:// or libsql://) or mount a volume at /data.
RUN mkdir -p /data
ENV PORT=8080 \
    COURSES_DIR=./courses \
    DATABASE_URL=/data/underlayer.db

EXPOSE 8080
CMD ["./underlayer.exe"]