FROM apache/airflow:2.3.4-python3.10 AS dev_build

###############################################################################
## Supported target architectures: amd64, arm64                              ##
## - amd64: Full support (Chrome/Selenium, Oracle)                           ##
## - arm64: Core support only (no Chrome/Selenium, no Oracle)                ##
###############################################################################

# TARGETARCH is automatically provided by Docker Buildx (amd64, arm64, etc.)
# When not using Buildx, we detect the actual architecture at build time
ARG TARGETARCH

### --------------------------------------------- run as root => ##
USER root

# Determine effective architecture: use TARGETARCH if set, otherwise detect from system
# This ensures correct behavior for both Buildx (CI) and plain docker build (local dev)
RUN EFFECTIVE_ARCH="${TARGETARCH:-$(dpkg --print-architecture)}" && \
    echo "EFFECTIVE_ARCH=${EFFECTIVE_ARCH}" > /etc/docker-build-arch && \
    if [ "$EFFECTIVE_ARCH" != "amd64" ] && [ "$EFFECTIVE_ARCH" != "arm64" ]; then \
        echo "ERROR: Unsupported architecture '$EFFECTIVE_ARCH'. Supported: amd64, arm64" && exit 1; \
    fi

RUN apt-get update

# required packages to install psycopg2 which is a dependency of ewah
RUN apt-get install -y --no-install-recommends postgresql-server-dev-all gcc wget

# create folder and give user airflow sufficient access rights
RUN mkdir /opt/ewah && \
    chmod -R 777 /opt/ewah

# required to use git
RUN apt-get install -y --no-install-recommends git

# required to use Chrome with Selenium (amd64 only - no ARM64 binaries available)
# see also: https://stackoverflow.com/questions/45323271/how-to-run-selenium-with-chrome-in-docker
RUN . /etc/docker-build-arch && \
    if [ "$EFFECTIVE_ARCH" = "amd64" ]; then \
        mkdir -p /opt/chrome && \
        cd /opt/chrome && \
        wget -q -O - https://dl-ssl.google.com/linux/linux_signing_key.pub | apt-key add - && \
        sh -c 'echo "deb [arch=amd64] http://dl.google.com/linux/chrome/deb/ stable main" >> /etc/apt/sources.list.d/google-chrome.list' && \
        apt-get -y update && \
        apt-get install -y google-chrome-stable && \
        apt-get install -yqq unzip && \
        wget -O /tmp/chromedriver.zip http://chromedriver.storage.googleapis.com/`curl -sS chromedriver.storage.googleapis.com/LATEST_RELEASE`/chromedriver_linux64.zip && \
        unzip /tmp/chromedriver.zip chromedriver -d /usr/local/bin/ && \
        cd /opt && \
        rm -r -f /opt/chrome; \
    fi
# set display port to avoid crash
ENV DISPLAY=:99


# install requirements due to Oracle (amd64 only - no ARM64 binaries available)
# see also: https://cx-oracle.readthedocs.io/en/latest/user_guide/installation.html#installing-cx-oracle-on-linux
RUN . /etc/docker-build-arch && \
    if [ "$EFFECTIVE_ARCH" = "amd64" ]; then \
        mkdir -p /opt/oracle && \
        apt-get install -y --no-install-recommends libaio1 unzip && \
        cd /opt/oracle && \
        wget https://download.oracle.com/otn_software/linux/instantclient/19800/instantclient-basic-linux.x64-19.8.0.0.0dbru.zip && \
        unzip instantclient-basic-linux.x64-19.8.0.0.0dbru.zip && \
        rm -r -f /opt/oracle/instantclient-basic-linux.x64-19.8.0.0.0dbru.zip && \
        ldconfig /opt/oracle/instantclient_19_8 && \
        chmod -R 777 /opt/oracle; \
    fi

# enable sudo
RUN echo "airflow ALL=(ALL) NOPASSWD: ALL" > /etc/sudoers && \
    chmod 0440 /etc/sudoers

# overwrite entrypoint
COPY --chown=airflow:root  docker/scripts/entrypoint_prod.sh /entrypoint
COPY --chown=airflow:root  docker/scripts/entrypoint_prod.py /entrypoint.py
RUN chmod +x /entrypoint

USER airflow
### <= --------------------------------------------- run as root ##


RUN pip install --user --upgrade --no-cache-dir pip 'setuptools<71'

# required to make Oracle work with airflow user (amd64 only)
RUN . /etc/docker-build-arch && \
    if [ "$EFFECTIVE_ARCH" = "amd64" ]; then sudo ldconfig /opt/oracle/instantclient_19_8; fi

# required to use SSH
RUN mkdir -p /home/airflow/.ssh

# install psycopg2 - optional, but increases iteration speed
RUN pip install --user --upgrade --no-cache-dir psycopg2

# Set development secrets (overwrite in production)
## Minimum required env variables
ENV AIRFLOW__CORE__SQL_ALCHEMY_CONN='postgresql+psycopg2://postgres:postgres@database:5432/ewah'
## Fernet key
ENV AIRFLOW__CORE__FERNET_KEY='kiQHALe31o7by-d9U-lzxhpDsmllTmu0DUagDuYQoWs='
## Flask App Secret Key
ENV AIRFLOW__WEBSERVER__SECRET_KEY='eb993886c858d0a3a24ff8a71d7913725e2f124261faf09cb05bd8d1a890'

# Let entrypoint know to install from bind-mounted volume
ENV EWAH_IMAGE_TYPE='DEV'
# Run support scripts on start-up
ENV EWAH_RUN_DEV_SUPPORT_SCRIPTS='1'

# FYI
ENV EWAH_AIRFLOW_CONNS_YAML_PATH='You can set me as a path to a non-standard airflow connections yml file!'

# Create a superuser for the airflow backend - overwrite as applicable
ENV AIRFLOW__WEBSERVER__AUTHENTICATE=True
ENV AIRFLOW__WEBSERVER__AUTH_BACKEND='airflow.contrib.auth.backends.password_auth'
ENV EWAH_AIRFLOW_USER_SET='1'
ENV EWAH_AIRFLOW_USER_USER='ewah'
ENV EWAH_AIRFLOW_USER_PASSWORD='ewah'
ENV EWAH_AIRFLOW_USER_FIRSTNAME='ewah'
ENV EWAH_AIRFLOW_USER_LASTNAME='ewah'
ENV EWAH_AIRFLOW_USER_EMAIL='ewah@gemmaanalytics.com'

# Workaround to make newer protobuf versions work
ENV PROTOCOL_BUFFERS_PYTHON_IMPLEMENTATION=python

################################################################################
## Set a number of environment variables as EWAH defaults, can be overwritten ##
################################################################################
ENV AIRFLOW_HOME=/opt/airflow

# Useful, often changed configurations
ENV AIRFLOW__CORE__EXECUTOR=LocalExecutor
ENV AIRFLOW__CORE__PARALLELISM=8
ENV AIRFLOW__CORE__MAX_ACTIVE_TASKS_PER_DAG=16
ENV AIRFLOW__WEBSERVER__BASE_URL="http://localhost:8080"

# Email related
ENV AIRFLOW__EMAIL__EMAIL_BACKEND=airflow.utils.email.send_email_smtp
ENV AIRFLOW__SMTP__SMTP_HOST=smtp.gmail.com
ENV AIRFLOW__SMTP__SMTP_STARTTLS=True
ENV AIRFLOW__SMTP__SMTP_SSL=False
# ENV AIRFLOW__SMTP__SMTP_USER=
# ENV AIRFLOW__SMTP__SMTP_PASSWORD=
ENV AIRFLOW__SMTP__SMTP_PORT=587
# ENV AIRFLOW__SMTP__SMTP_MAIL_FROM=

# Logging
ENV AIRFLOW__LOGGING__REMOTE_LOGGING=False
# ENV AIRFLOW__LOGGING__REMOTE_LOG_CONN_ID=
# ENV AIRFLOW__LOGGING__REMOTE_BASE_LOG_FOLDER=
# ENV AIRFLOW__LOGGING__ENCRYPT_S3_LOGS=
# ENV AIRFLOW__LOGGING__LOGGING_LEVEL = INFO

# Other useful configurations
ENV AIRFLOW__CORE__LOAD_EXAMPLES=False
ENV AIRFLOW__CORE__LOAD_DEFAULT_CONNECTIONS=False
ENV AIRFLOW__API__AUTH_BACKEND=airflow.api.auth.backend.basic_auth
ENV AIRFLOW__WEBSERVER__EXPOSE_CONFIG=False
ENV AIRFLOW__CORE__SECURE_MODE=True
# Increase processor timeout to avoid timeout when processing a large dags.py
ENV AIRFLOW__CORE__DAGBAG_IMPORT_TIMEOUT=240
ENV AIRFLOW__CORE__DAG_FILE_PROCESSOR_TIMEOUT=240

# Related to $AIRFLOW_HOME
ENV AIRFLOW__CORE__DAGS_FOLDER=/opt/airflow/dags
ENV AIRFLOW__LOGGING__BASE_LOG_FOLDER=/opt/airflow/logs
ENV AIRFLOW__CORE__PLUGINS_FOLDER=/opt/airflow/plugins
ENV AIRFLOW__LOGGING__DAG_PROCESSOR_MANAGER_LOG_LOCATION=/opt/airflow/logs/dag_processor_manager/dag_processor_manager.log
ENV AIRFLOW__SCHEDULER__CHILD_PROCESS_LOG_DIRECTORY=/opt/airflow/logs/scheduler

# Default value socket.getfqdn sometimes cannot resolve hostname and falls back to gethostname()
# If that happens, all tasks fail - just use gethostname() from the start instead
ENV AIRFLOW__CORE__HOSTNAME_CALLABLE="socket.gethostname"

###############################################################################
## Multi-Stage build: for the publishable EWAH image, install EWAH from pip  ##
###############################################################################
FROM dev_build as prod_build

# Note: /etc/docker-build-arch (with EFFECTIVE_ARCH) is inherited from dev_build

# don't install from bind-mounted volume
ENV EWAH_IMAGE_TYPE='PROD'

# don't run support scripts as default
# Overwrite this ENV to '1' if you'd like to auto-upgrade the metadata db &
# auto-set a default admin UI user (use ENV vars to set the credentials, namely:
# EWAH_AIRFLOW_USER_USER, EWAH_AIRFLOW_USER_PASSWORD, EWAH_AIRFLOW_USER_EMAIL)
ENV EWAH_RUN_DEV_SUPPORT_SCRIPTS='0'

# Force using environment variables to set Fernet Key
ENV AIRFLOW__CORE__FERNET_KEY='Hello, I am AIRFLOW__CORE__FERNET_KEY and I need to be set in production!'

# Force overwrite of these secrets via ENV VAR to ensure it is set uniquely
ENV AIRFLOW__WEBSERVER__SECRET_KEY=''
ENV AIRFLOW__CORE__SQL_ALCHEMY_CONN=''

# Extra configurations
ENV AIRFLOW__WEBSERVER__WARN_DEPLOYMENT_EXPOSURE=False

# install from pip
ARG package_version
RUN pip install --user --upgrade --no-cache-dir ewah==${package_version}

# Install Oracle support on amd64 only (cx_Oracle requires Oracle Instant Client)
RUN . /etc/docker-build-arch && \
    if [ "$EFFECTIVE_ARCH" = "amd64" ]; then \
        pip install --user --upgrade --no-cache-dir "ewah[oracle]==${package_version}"; \
    fi