78 lines
3.2 KiB
Docker
78 lines
3.2 KiB
Docker
|
# TouchBase — single image runs both web (`pnpm start`) and worker
|
||
|
|
# (`pnpm worker`). The compose file picks via `command:` override.
|
||
|
|
#
|
||
|
|
# Base: node:22-bookworm-slim — Debian-based for broad native-deps compat
|
||
|
|
# (sharp, esbuild, etc.). We trade ~80MB image size for fewer surprises
|
||
|
|
# than alpine.
|
||
|
|
|
||
|
|
# ---------- deps: install all dependencies (incl. dev for build) ----------
|
||
|
|
FROM node:22-bookworm-slim AS deps
|
||
|
|
WORKDIR /app
|
||
|
|
|
||
|
|
# pnpm via corepack
|
||
|
|
RUN corepack enable && corepack prepare pnpm@10.18.3 --activate
|
||
|
|
|
||
|
|
COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
|
||
|
|
RUN pnpm install --frozen-lockfile
|
||
|
|
|
||
|
|
# ---------- builder: prisma generate + next build ----------
|
||
|
|
FROM node:22-bookworm-slim AS builder
|
||
|
|
WORKDIR /app
|
||
|
|
RUN corepack enable && corepack prepare pnpm@10.18.3 --activate
|
||
|
|
|
||
|
|
COPY --from=deps /app/node_modules ./node_modules
|
||
|
|
COPY . .
|
||
|
|
|
||
|
|
# Generate the Prisma client into src/generated/prisma — it's then bundled
|
||
|
|
# by the Next build the same way the rest of `src/` is.
|
||
|
|
RUN pnpm exec prisma generate
|
||
|
|
|
||
|
|
# Next build uses Turbopack in dev but the production build is the regular
|
||
|
|
# webpack pipeline; should work as-is in CI.
|
||
|
|
ENV NEXT_TELEMETRY_DISABLED=1
|
||
|
|
RUN pnpm build
|
||
|
|
|
||
|
|
# ---------- runner: minimal runtime image ----------
|
||
|
|
FROM node:22-bookworm-slim AS runner
|
||
|
|
WORKDIR /app
|
||
|
|
|
||
|
|
# Non-root user for the runtime
|
||
|
|
RUN groupadd --system --gid 1001 nodejs \
|
||
|
|
&& useradd --system --uid 1001 --gid nodejs nextjs
|
||
|
|
|
||
|
|
# Install pnpm globally so it's on PATH for the non-root user without
|
||
|
|
# corepack re-downloading into a per-user cache it can't write to.
|
||
|
|
RUN npm install --global pnpm@10.18.3
|
||
|
|
|
||
|
|
ENV NODE_ENV=production
|
||
|
|
ENV NEXT_TELEMETRY_DISABLED=1
|
||
|
|
|
||
|
|
# Copy everything we need:
|
||
|
|
# - node_modules (for `next start`, `pnpm worker`/tsx, prisma CLI)
|
||
|
|
# - .next build output
|
||
|
|
# - public assets
|
||
|
|
# - prisma schema + generated client
|
||
|
|
# - source needed by the worker (scripts + src/lib + src/generated)
|
||
|
|
# - package.json scripts
|
||
|
|
COPY --from=deps --chown=nextjs:nodejs /app/node_modules ./node_modules
|
||
|
|
COPY --from=builder --chown=nextjs:nodejs /app/.next ./.next
|
||
|
|
COPY --from=builder --chown=nextjs:nodejs /app/public ./public
|
||
|
|
COPY --from=builder --chown=nextjs:nodejs /app/prisma ./prisma
|
||
|
|
COPY --from=builder --chown=nextjs:nodejs /app/prisma.config.ts ./prisma.config.ts
|
||
|
|
COPY --from=builder --chown=nextjs:nodejs /app/scripts ./scripts
|
||
|
|
COPY --from=builder --chown=nextjs:nodejs /app/src/generated ./src/generated
|
||
|
|
COPY --from=builder --chown=nextjs:nodejs /app/src/lib ./src/lib
|
||
|
|
COPY --from=builder --chown=nextjs:nodejs /app/src/auth.ts ./src/auth.ts
|
||
|
|
COPY --from=builder --chown=nextjs:nodejs /app/src/components ./src/components
|
||
|
|
COPY --from=builder --chown=nextjs:nodejs /app/tsconfig.json ./tsconfig.json
|
||
|
|
COPY --from=builder --chown=nextjs:nodejs /app/next.config.ts ./next.config.ts
|
||
|
|
COPY --from=builder --chown=nextjs:nodejs /app/package.json ./package.json
|
||
|
|
COPY --from=builder --chown=nextjs:nodejs /app/pnpm-lock.yaml ./pnpm-lock.yaml
|
||
|
|
COPY --from=builder --chown=nextjs:nodejs /app/pnpm-workspace.yaml ./pnpm-workspace.yaml
|
||
|
|
|
||
|
|
USER nextjs
|
||
|
|
EXPOSE 3000
|
||
|
|
|
||
|
|
# Default to the web tier; `command:` override in compose runs the worker.
|
||
|
|
CMD ["pnpm", "start"]
|