Claude Fable 5
6e5a632c31
Multi-stage images: web (workspace build baked into unprivileged nginx with SPA fallback, asset caching, /healthz) and api (pnpm deploy bundle with the prisma CLI for migrate-on-start, non-root, node-based healthcheck). deploy/compose/docker-compose.yml defines the stage stack (web, api, db) with frontend/internal networks, localhost-only published ports for the host reverse proxy, log rotation, and named volumes; .env.example documents every variable. compose.dev.yml layers hot-reloading dev containers (or database-only usage) over the same definition. Verified locally: full stack healthy, SPA fallback, readyz green after automatic migration, db not reachable from outside. Closes #6 Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
22 lines
892 B
Docker
22 lines
892 B
Docker
# Build context is the repository root (workspace build):
|
|
# docker build -f apps/web/Dockerfile .
|
|
|
|
FROM node:22.15-alpine AS build
|
|
ARG APP_VERSION=0.0.0-dev
|
|
WORKDIR /repo
|
|
RUN npm install -g pnpm@11
|
|
COPY pnpm-workspace.yaml pnpm-lock.yaml package.json tsconfig.base.json ./
|
|
COPY packages/shared ./packages/shared
|
|
COPY apps/web ./apps/web
|
|
RUN pnpm install --frozen-lockfile --filter @dorfteich/web... \
|
|
&& pnpm --filter @dorfteich/shared build \
|
|
&& VITE_APP_VERSION=${APP_VERSION} pnpm --filter @dorfteich/web build
|
|
|
|
# nginx-unprivileged runs as uid 101 and listens on 8080 — no root needed.
|
|
FROM nginxinc/nginx-unprivileged:1.27-alpine
|
|
COPY apps/web/nginx.conf /etc/nginx/conf.d/default.conf
|
|
COPY --from=build /repo/apps/web/dist /usr/share/nginx/html
|
|
EXPOSE 8080
|
|
HEALTHCHECK --interval=30s --timeout=3s --retries=3 \
|
|
CMD wget -q -O /dev/null http://127.0.0.1:8080/healthz || exit 1
|