# Backup sidecar image: mysql:8.4 base (mysqldump already included) plus
# offline-packaged restic for deduped, encrypted backups.
#
# OFFLINE BUILD: No package downloads during build to avoid corporate proxy SSL issues.
# - mysqldump: included in mysql:8.4 base image (version-matched)
# - restic: pre-downloaded binary baked into repo at scripts/backup/offline-packages/
# - NO Python/alembic: simplified backup without manifest generation
#
# This works behind Zscaler/corporate proxies because nothing downloads during build.
FROM mysql:8.4

# Copy pre-downloaded restic binary (offline package - baked into repo)
COPY scripts/backup/offline-packages/restic_0.17.3_linux_amd64.bz2 /tmp/restic.bz2

# Install restic from offline package (no downloads, no SSL issues)
RUN bunzip2 /tmp/restic.bz2 \
	&& install -m 0755 /tmp/restic /usr/local/bin/restic \
	&& rm -f /tmp/restic \
	&& restic version

# Copy backup scripts into image
COPY scripts/backup/*.sh /opt/backup/
RUN chmod +x /opt/backup/*.sh

ENTRYPOINT ["/opt/backup/backup.sh"]