FROM eclipse-temurin:21-jre

WORKDIR /app
ARG JAR_FILE=backend/target/*.jar
COPY --chown=10001:10001 ${JAR_FILE} app.jar

# Native Spring scheduling only; Java remains PID 1, with no PHP or cron daemon.
# Override SPRING_TASK_GROUPS to select groups; an explicit empty value disables them.
ENV SERVER_ADDRESS=0.0.0.0 \
    SPRING_TASK_GROUPS=courier-logout,stb-compliance,sb-master-export,hha-safebags,mysql-status,file-maintenance,replication-monitor,hha-soap-master,hha-soap-status
USER 10001:10001
EXPOSE 8080

ENTRYPOINT ["java", "-jar", "/app/app.jar"]