Production Deployment

# Use official Node.js LTS image
FROM node:18-alpine

# Install dumb-init for proper signal handling
RUN apk add --no-cache dumb-init

# Set working directory
WORKDIR /app

# Copy package files
COPY package*.json ./

# Install production dependencies only
RUN npm ci --only=production && npm cache clean --force

# Copy application code
COPY . .

# Create non-root user
RUN addgroup -g 1001 -S nodejs && \
    adduser -S nodejs -u 1001 && \
    chown -R nodejs:nodejs /app

# Switch to non-root user
USER nodejs

# Expose port
EXPOSE 3000

# Health check
HEALTHCHECK --interval=30s --timeout=3s --start-period=40s \
  CMD node -e "require('http').get('http://localhost:3000/health', (r) => {process.exit(r.statusCode === 200 ? 0 : 1)})"

# Use dumb-init to handle signals properly
ENTRYPOINT ["dumb-init", "--"]

# Start application
CMD ["node", "server.js"]

version: '3.8'

services:
  app:
    build: .
    ports:
      - "3000:3000"
    environment:
      - NODE_ENV=production
    env_file:
      - .env
    depends_on:
      - mongodb
    restart: unless-stopped
    networks:
      - cuido-network

  mongodb:
    image: mongo:5.0
    ports:
      - "27017:27017"
    volumes:
      - mongodb-data:/data/db
    environment:
      - MONGO_INITDB_ROOT_USERNAME=admin
      - MONGO_INITDB_ROOT_PASSWORD=secure_password
    restart: unless-stopped
    networks:
      - cuido-network

volumes:
  mongodb-data:

networks:
  cuido-network:
    driver: bridge

# Server
NODE_ENV=production
PORT=3000

# Database - Use connection string with authentication
MONGODB_URI=mongodb://admin:password@mongodb:27017/cuido-prod?authSource=admin

# Security
JWT_SECRET=<generate-strong-secret-256-bits>

# Claude AI
ANTHROPIC_API_KEY=sk-ant-api03-your-production-key
CLAUDE_MODEL=claude-3-sonnet-20240229

# CORS - Production domains only
ALLOWED_ORIGINS=https://yourdomain.com,https://app.yourdomain.com
SOCKET_IO_CORS_ORIGINS=https://yourdomain.com,https://app.yourdomain.com

# Rate Limiting - Stricter in production
RATE_LIMIT_WINDOW_MS=900000
RATE_LIMIT_MAX_REQUESTS=50

# Scheduled Tasks
ENABLE_CRON_JOBS=true

# Logging
LOG_LEVEL=info

const gracefulShutdown = (signal) => {
  logger.info(`${signal} recibido. Cerrando servidor...`);
  server.close(() => {
    logger.info('Servidor cerrado exitosamente');
    process.exit(0);
  });
};

process.on('SIGTERM', () => gracefulShutdown('SIGTERM'));
process.on('SIGINT', () => gracefulShutdown('SIGINT'));

[Unit]
Description=CUIDO Backend
After=network.target mongodb.service

[Service]
Type=simple
User=nodejs
WorkingDirectory=/opt/cuido-backend
EnvironmentFile=/opt/cuido-backend/.env
ExecStart=/usr/bin/node server.js
Restart=on-failure
RestartSec=10
KillMode=mixed
KillSignal=SIGTERM
TimeoutStopSec=30

[Install]
WantedBy=multi-user.target

app.use(compression());