elpatron
ffc21a76e7
- Install su-exec in Dockerfile for user switching - Modified start.sh to create directories as root, then change ownership - Container starts as root but switches to nextjs user for app execution - This prevents permission denied errors when creating .storage directories
72 lines
1.8 KiB
Docker
72 lines
1.8 KiB
Docker
# Multi-stage build for production
|
|
FROM node:22-alpine AS base
|
|
|
|
# Install pnpm
|
|
RUN npm install -g pnpm
|
|
|
|
# Set working directory
|
|
WORKDIR /app
|
|
|
|
# Copy package files
|
|
COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
|
|
|
|
# Install dependencies
|
|
RUN pnpm install --frozen-lockfile
|
|
|
|
# Copy source code
|
|
COPY . .
|
|
|
|
# Build the application
|
|
RUN pnpm build
|
|
|
|
# Production stage
|
|
FROM node:22-alpine AS production
|
|
|
|
# Install pnpm and su-exec
|
|
RUN npm install -g pnpm ts-node && apk add --no-cache su-exec
|
|
|
|
# Set working directory
|
|
WORKDIR /app
|
|
|
|
# Copy package files
|
|
COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
|
|
|
|
# Install production dependencies only
|
|
RUN pnpm install --frozen-lockfile --prod
|
|
|
|
# Copy built application from base stage
|
|
COPY --from=base /app/dist ./dist
|
|
COPY --from=base /app/server-dist ./server-dist
|
|
|
|
# Copy necessary files for runtime
|
|
COPY --from=base /app/src/server/index.ts ./src/server/index.ts
|
|
COPY --from=base /app/src/server/routes ./src/server/routes
|
|
COPY --from=base /app/src/server/rpc ./src/server/rpc
|
|
COPY --from=base /app/src/server/lib ./src/server/lib
|
|
COPY --from=base /app/tsconfig.server.json ./tsconfig.server.json
|
|
COPY start.sh ./start.sh
|
|
|
|
# Create non-root user for security
|
|
RUN addgroup -g 1001 -S nodejs
|
|
RUN adduser -S nextjs -u 1001
|
|
|
|
# Make start script executable
|
|
RUN chmod +x /app/start.sh
|
|
|
|
# Change ownership of the app directory (but keep root for .storage)
|
|
RUN chown -R nextjs:nodejs /app
|
|
RUN chown root:root /app/.storage 2>/dev/null || true
|
|
|
|
# Don't switch to nextjs user here - the start script will handle it
|
|
# USER nextjs
|
|
|
|
# Expose port
|
|
EXPOSE 3000
|
|
|
|
# Health check
|
|
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
|
|
CMD node -e "require('http').get('http://localhost:3000/health', (res) => { process.exit(res.statusCode === 200 ? 0 : 1) })" || exit 1
|
|
|
|
# Start the application with startup script
|
|
CMD ["/app/start.sh"]
|