# Backup SaaS Agent — build locally:
#   curl -fsSL https://www.orathos.com/install/Dockerfile -o Dockerfile
#   curl -fsSL https://www.orathos.com/install/agent.tar.gz -o agent.tar.gz && tar xzf agent.tar.gz
#   docker build -t backup-agent .
#   docker run -d --name backup-agent --restart=always \
#     -v /:/host:ro -v /etc/backup-agent:/etc/backup-agent \
#     -e BACKUP_SAAS_URL=https://www.orathos.com -e BACKUP_SAAS_TOKEN=agt_xxx \
#     backup-agent

FROM python:3.12-slim

RUN apt-get update && apt-get install -y --no-install-recommends \
        ca-certificates curl \
    && rm -rf /var/lib/apt/lists/*

WORKDIR /opt/agent
COPY agent/ /opt/agent/
RUN pip install --no-cache-dir requests cryptography zstandard

# Drop a tiny entrypoint that writes a config file from env vars then loops.
RUN cat > /usr/local/bin/run-agent.sh <<'SH'
#!/usr/bin/env bash
set -euo pipefail
mkdir -p /etc/backup-agent
cat > /etc/backup-agent/config.toml <<EOF
server_url = "${BACKUP_SAAS_URL:?missing BACKUP_SAAS_URL}"
token      = "${BACKUP_SAAS_TOKEN:?missing BACKUP_SAAS_TOKEN}"
include    = ["/host"]
exclude    = ["node_modules", "*.log", "*.tmp", "/host/proc", "/host/sys", "/host/dev", "/host/run"]
chunk_size = 4194304
EOF
chmod 600 /etc/backup-agent/config.toml
python -m agent --config /etc/backup-agent/config.toml handshake || true
while true; do
    python -m agent --config /etc/backup-agent/config.toml run-backup --type incremental || true
    sleep 3600
done
SH
RUN chmod +x /usr/local/bin/run-agent.sh

CMD ["/usr/local/bin/run-agent.sh"]