Arnaud
68f0f490b9
Moved compose.yml, compose.prod.yml, DEPLOY.md, traefik/, and cron/ out of docker/ into the repo root (docker/ removed). Updated every reference: - Dockerfile: COPY paths for the cron stage - .dockerignore: dropped the now-unneeded docker/!docker-cron exclude+exception pair (cron/ is just a normal top-level dir now, no special-casing needed) - compose.prod.yml: build context ".." -> "." (Dockerfile and compose files are now siblings, not one level apart) - CLAUDE.md, DEPLOY.md, compose.yml, traefik/epicure.yml, cron/run-digest.sh, weekly-digest route.ts: path references in comments/ docs Verified: both compose files validate, and all three Dockerfile targets (runner/cron/migrator) build clean via a local --no-cache docker build from the new layout. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
70 lines
2.7 KiB
Docker
70 lines
2.7 KiB
Docker
# syntax=docker/dockerfile:1
|
|
FROM node:22-alpine AS base
|
|
RUN corepack enable
|
|
|
|
# ---- deps: install full workspace deps ----
|
|
FROM base AS deps
|
|
WORKDIR /repo
|
|
COPY pnpm-workspace.yaml package.json pnpm-lock.yaml ./
|
|
COPY apps/web/package.json apps/web/package.json
|
|
COPY packages/db/package.json packages/db/package.json
|
|
RUN pnpm install --frozen-lockfile
|
|
|
|
# ---- migrator: applies drizzle migrations + seeds tier definitions ----
|
|
FROM deps AS migrator
|
|
WORKDIR /repo/packages/db
|
|
COPY packages/db .
|
|
CMD ["sh", "-c", "pnpm migrate && pnpm seed"]
|
|
|
|
# ---- build ----
|
|
FROM base AS build
|
|
WORKDIR /repo
|
|
COPY --from=deps /repo/node_modules ./node_modules
|
|
COPY --from=deps /repo/apps/web/node_modules ./apps/web/node_modules
|
|
COPY --from=deps /repo/packages/db/node_modules ./packages/db/node_modules
|
|
COPY . .
|
|
# apps/web/.env.local is normally a symlink to repo-root .env.local (gitignored);
|
|
# it doesn't exist in the build context, so Next's env loader chokes on the dangling
|
|
# link. No secrets are needed at build time — they're injected at container runtime.
|
|
RUN rm -f apps/web/.env.local && touch apps/web/.env.local
|
|
ENV NEXT_TELEMETRY_DISABLED=1
|
|
# NEXT_PUBLIC_* vars are inlined into the client bundle at build time, not read at
|
|
# container runtime — must be passed as build args (compose.prod.yml wires these
|
|
# from the same stack env vars used at runtime, so they stay in sync).
|
|
ARG NEXT_PUBLIC_VAPID_PUBLIC_KEY
|
|
ARG NEXT_PUBLIC_GITHUB_ENABLED
|
|
ARG NEXT_PUBLIC_DISCORD_ENABLED
|
|
ARG NEXT_PUBLIC_AUTHENTIK_ENABLED
|
|
ENV NEXT_PUBLIC_VAPID_PUBLIC_KEY=$NEXT_PUBLIC_VAPID_PUBLIC_KEY
|
|
ENV NEXT_PUBLIC_GITHUB_ENABLED=$NEXT_PUBLIC_GITHUB_ENABLED
|
|
ENV NEXT_PUBLIC_DISCORD_ENABLED=$NEXT_PUBLIC_DISCORD_ENABLED
|
|
ENV NEXT_PUBLIC_AUTHENTIK_ENABLED=$NEXT_PUBLIC_AUTHENTIK_ENABLED
|
|
RUN pnpm --filter web build
|
|
|
|
# ---- runtime ----
|
|
FROM base AS runner
|
|
WORKDIR /app
|
|
ENV NODE_ENV=production
|
|
ENV NEXT_TELEMETRY_DISABLED=1
|
|
ENV PORT=3000
|
|
RUN addgroup -g 1001 -S nodejs && adduser -S nextjs -u 1001
|
|
|
|
COPY --from=build /repo/apps/web/public ./public
|
|
COPY --from=build --chown=nextjs:nodejs /repo/apps/web/.next/standalone ./
|
|
COPY --from=build --chown=nextjs:nodejs /repo/apps/web/.next/static ./apps/web/.next/static
|
|
|
|
USER nextjs
|
|
EXPOSE 3000
|
|
CMD ["node", "apps/web/server.js"]
|
|
|
|
# ---- cron: periodically triggers internal cron endpoints (e.g. weekly digest) ----
|
|
# Minimal alpine + busybox crond image — just curls the running `web` service on a
|
|
# schedule. Doesn't need the app build output at all, so it's based on `base`
|
|
# rather than `runner`, keeping the image tiny and independent of the Next build.
|
|
FROM base AS cron
|
|
RUN apk add --no-cache curl
|
|
COPY cron/crontab /etc/crontabs/root
|
|
COPY cron/run-digest.sh /usr/local/bin/run-digest.sh
|
|
RUN chmod +x /usr/local/bin/run-digest.sh
|
|
CMD ["crond", "-f", "-l", "2"]
|