Dockerfile

# syntax=docker/dockerfile:1.4
# ── Stage 1: Build ─────────────────────────────────────────────────────────────
FROM rust:1.97.1-slim AS builder

ARG CARGO_BUILD_FLAGS="--no-default-features --features server-only,palace,local-embeddings"
ARG PREBUILD_DEPS="1"

RUN apt-get update && apt-get install -y \
    clang \
    libclang-dev \
    lld \
    pkg-config \
    libssl-dev \
    build-essential \
    cmake \
    libssl-dev \
    && rm -rf /var/lib/apt/lists/*

# Use lld linker — significantly lower peak RAM than GNU ld during link step
ENV RUSTFLAGS="-C linker=clang -C link-arg=-fuse-ld=lld"

WORKDIR /app

# Cache dependencies separately from source (layer cache optimization)
COPY Cargo.toml Cargo.lock ./
COPY crates/surreal-memory/Cargo.toml crates/surreal-memory/
RUN if [ "${PREBUILD_DEPS}" = "1" ]; then \
      mkdir -p src crates/surreal-memory/src \
      && echo "fn main() {}" > src/main.rs \
      && echo "" > crates/surreal-memory/src/lib.rs \
      && cargo build --release --bin surreal-memory-server ${CARGO_BUILD_FLAGS} 2>/dev/null || true; \
    fi

# Now copy and build the real source
COPY . .
RUN touch src/main.rs crates/surreal-memory/src/lib.rs \
    && cargo build --release --locked --bin surreal-memory-server ${CARGO_BUILD_FLAGS}

# ── Stage 2: Runtime ───────────────────────────────────────────────────────────
FROM debian:trixie-slim AS runtime

RUN apt-get update \
    && apt-get install -y --no-install-recommends ca-certificates curl libssl3 libstdc++6 \
    && rm -rf /var/lib/apt/lists/*


COPY --from=builder /app/target/release/surreal-memory-server /usr/local/bin/surreal-memory-server

# Non-root user for security
RUN useradd -m -u 1001 smserver
USER smserver

WORKDIR /data

ENV RUST_LOG=info \
    API_PORT=3001 \
    SURREAL_MODE=server \
    SURREAL_ENDPOINT=ws://surrealdb:8000 \
    SURREAL_USERNAME=root \
    SURREAL_PASSWORD=root \
    SURREAL_NAMESPACE=memory \
    SURREAL_DATABASE=main

EXPOSE 3001

HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
    CMD curl -f http://localhost:${API_PORT}/health || exit 1

CMD ["surreal-memory-server"]