FROM php:8.3-apache-bookworm

RUN docker-php-ext-install mysqli \
    && a2enmod rewrite headers setenvif \
    && install -d -o www-data -g www-data -m 0700 /var/lib/php/sessions

WORKDIR /var/www/html

# Deliberately do not copy SQL exports, local tooling, or host credentials.
COPY *.php favicon.ico ./
COPY assets/ ./assets/
COPY includes/ ./includes/
COPY dashboard/ ./dashboard/
COPY docker/conn.php ./includes/conn.php
COPY docker/apache.conf /etc/apache2/conf-available/recruitment.conf
COPY docker/php.ini /usr/local/etc/php/conf.d/recruitment.ini
COPY docker/health.php /usr/local/share/recruitment/health.php
COPY docker/migrate.php /usr/local/share/recruitment/migrate.php
COPY docker/healthcheck.php /usr/local/bin/recruitment-healthcheck.php

RUN a2enconf recruitment \
    && find /var/www/html -type d -exec chmod 0755 {} + \
    && find /var/www/html -type f -exec chmod 0644 {} +

EXPOSE 80