# Original Saisit permissions/archive fork; upstream attribution retained.
FROM docuseal/docuseal@sha256:e171808ce8dabb08491a49a6d8c477670a65ddce5e3de4764904b63a4487940f AS corresponding_source
ARG SAISIT_SOURCE_SHA256
COPY public/saisit-source-${SAISIT_SOURCE_SHA256}.tar.gz /tmp/source.tar.gz
RUN printf '%s  /tmp/source.tar.gz\n' "$SAISIT_SOURCE_SHA256" | sha256sum -c - && \
    mkdir /source && tar -xzf /tmp/source.tar.gz -C /source

FROM docuseal/docuseal@sha256:e171808ce8dabb08491a49a6d8c477670a65ddce5e3de4764904b63a4487940f
ARG SAISIT_SOURCE_SHA256
ENV SAISIT_SOURCE_SHA256=$SAISIT_SOURCE_SHA256
COPY --from=corresponding_source --chown=docuseal:docuseal /source/app /app/app
COPY --from=corresponding_source --chown=docuseal:docuseal /source/lib /app/lib
COPY --from=corresponding_source --chown=docuseal:docuseal /source/config /app/config
COPY --from=corresponding_source --chown=docuseal:docuseal /source/db/migrate /app/db/migrate
COPY --from=corresponding_source --chown=docuseal:docuseal /source/saisit/archive /app/saisit/archive
COPY --from=corresponding_source --chown=docuseal:docuseal /source/saisit/deploy/bootstrap.rb /app/saisit/deploy/bootstrap.rb
COPY --from=corresponding_source --chown=docuseal:docuseal /source/saisit/deploy/verify_image.rb /app/saisit/deploy/verify_image.rb
COPY --from=corresponding_source --chown=docuseal:docuseal /tmp/source.tar.gz /app/public/saisit-source-${SAISIT_SOURCE_SHA256}.tar.gz
RUN mkdir -p /data/docuseal /data/archive && chown 2000:2000 /data/docuseal /data/archive && \
    chmod 0700 /data/docuseal /data/archive
LABEL org.opencontainers.image.revision=c6a7555f545ea8ea96207f198c2d8e42d16b091f
LABEL org.saisit.corresponding-source.sha256=$SAISIT_SOURCE_SHA256
USER 2000:2000
