FROM node:20-slim

RUN apt-get update && \
    apt-get install -y git curl ca-certificates && \
    rm -rf /var/lib/apt/lists/*

RUN curl -sSL https://github.com/git-lfs/git-lfs/releases/download/v3.4.0/git-lfs-linux-amd64-v3.4.0.tar.gz \
    | tar -xz -C /tmp && \
    mv /tmp/git-lfs-3.4.0/git-lfs /usr/local/bin/git-lfs && \
    chmod +x /usr/local/bin/git-lfs && \
    git lfs install

WORKDIR /app

RUN rm -rf /app/* || true

ARG CACHEBUST=$(date +%s)

RUN --mount=type=secret,id=GH_TOKEN \
    git clone --depth=1 https://$(cat /run/secrets/GH_TOKEN)@github.com/IMaduwike/telebot-api.git . && \
    git lfs pull && \
    rm -rf .git

RUN mv telegram-bot-api /usr/local/bin/telegram-bot-api && chmod +x /usr/local/bin/telegram-bot-api

RUN chmod +x start.sh

RUN npm install

EXPOSE 7860

CMD ["sh", "./start.sh"]