arnaudne/Epicure
1
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity

feat(docker): production-ready Dockerfile + Portainer compose stack

Browse Source 
- Rewrite Dockerfile: multi-stage pnpm monorepo build with Next.js
  standalone output, non-root user, minimal runner image
- Enable next.config.ts `output: standalone` + serverExternalPackages
- Rewrite docker/compose.prod.yml: full production stack with migrate
  service, minio-init, named networks, build context for Portainer
- Add scripts/migrate.mjs: standalone Drizzle migration runner
- Update .dockerignore for cleaner build context

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Arnaud
2026-07-01 12:50:45 +02:00
parent aed38e4eca
commit 5ac50e9bf0
5 changed files with 181 additions and 101 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Dockerfile
+39 -63
View File
@@ -1,84 +1,60 @@
# Multi-stage build for Next.js monorepo
FROM node:22-alpine AS base
ENV PNPM_HOME="/pnpm"
ENV PATH="$PNPM_HOME:$PATH"
RUN corepack enable pnpm
# ── deps ──────────────────────────────────────────────────────────────────────
FROM base AS deps
WORKDIR /app
# Install dependencies stage
FROM base AS deps
RUN apk add --no-cache libc6-compat git python3 make g++
COPY pnpm-lock.yaml pnpm-workspace.yaml package.json ./
RUN pnpm install --frozen-lockfile --prod
COPY package.json pnpm-workspace.yaml pnpm-lock.yaml ./
COPY apps/web/package.json ./apps/web/
COPY packages/db/package.json ./packages/db/
COPY packages/api-types/package.json ./packages/api-types/
# Build stage
RUN pnpm install --frozen-lockfile
# ── builder ───────────────────────────────────────────────────────────────────
FROM base AS builder
RUN apk add --no-cache libc6-compat git postgresql-client python3 make g++ curl
WORKDIR /app
# Accept build arguments for Next.js environment
ARG NEXT_PUBLIC_VAPID_PUBLIC_KEY=BJPBk8PPF2gWpsgZhWdoGS132nhx5OkLnGthKABMzkzK2lKxGNuk-Lhl6-WkqADzp1a_-NlSbnOjM0C7zP7MmFY
ARG VAPID_PRIVATE_KEY=bgyp_UEX0URY4Ph7DokBtOmzW4VTx-gWzMILIF6lN9g
ARG BETTER_AUTH_SECRET=lDmPWNg7oxzmwzFuI+jsjLpPt7IQC0LTmn5k2NPfxgk=
ARG BETTER_AUTH_URL=http://localhost:3000
COPY --from=deps /app/node_modules ./node_modules
COPY --from=deps /app/apps/web/node_modules ./apps/web/node_modules
COPY --from=deps /app/packages/db/node_modules ./packages/db/node_modules 2>/dev/null || true
COPY --from=deps /app/packages/api-types/node_modules ./packages/api-types/node_modules 2>/dev/null || true
# Set environment variables for build - MUST be set before build!
ENV NEXT_PUBLIC_VAPID_PUBLIC_KEY=${NEXT_PUBLIC_VAPID_PUBLIC_KEY}
ENV VAPID_PRIVATE_KEY=${VAPID_PRIVATE_KEY}
ENV BETTER_AUTH_SECRET=${BETTER_AUTH_SECRET}
ENV BETTER_AUTH_URL=${BETTER_AUTH_URL}
ENV CI=true
ENV NODE_OPTIONS="--max-old-space-size=3072"
COPY pnpm-lock.yaml pnpm-workspace.yaml package.json ./
RUN echo "Installing dependencies..." && pnpm install --frozen-lockfile
# Copy source code
COPY . .
# Create minimal .env file for Next.js build
RUN cat > apps/web/.env.local << EOF
NEXT_PUBLIC_VAPID_PUBLIC_KEY=${NEXT_PUBLIC_VAPID_PUBLIC_KEY}
VAPID_PRIVATE_KEY=${VAPID_PRIVATE_KEY}
BETTER_AUTH_SECRET=${BETTER_AUTH_SECRET}
BETTER_AUTH_URL=${BETTER_AUTH_URL}
EOF
ENV NEXT_TELEMETRY_DISABLED=1
ENV NODE_ENV=production
# Build the app with verbose output
RUN echo "Building application..." && pnpm build
RUN pnpm --filter @epicure/db build 2>/dev/null || true
RUN pnpm --filter @epicure/api-types build 2>/dev/null || true
RUN pnpm --filter @epicure/web build
# Production runtime
FROM base AS runtime
RUN apk add --no-cache libc6-compat postgresql-client curl
ENV NODE_ENV production
ENV NODE_OPTIONS="--max-old-space-size=2048"
# ── runner ────────────────────────────────────────────────────────────────────
FROM node:22-alpine AS runner
WORKDIR /app
# Copy production node_modules from builder stage
COPY --from=builder /app/node_modules ./node_modules
ENV NODE_ENV=production
ENV NEXT_TELEMETRY_DISABLED=1
# Copy built Next.js app
COPY --from=builder /app/apps/web/.next/standalone ./
RUN addgroup --system --gid 1001 nodejs \
&& adduser --system --uid 1001 nextjs
# Copy public assets
COPY --from=builder /app/apps/web/public ./public
# Standalone output + static assets
COPY --from=builder --chown=nextjs:nodejs /app/apps/web/.next/standalone ./
COPY --from=builder --chown=nextjs:nodejs /app/apps/web/.next/static ./apps/web/.next/static
COPY --from=builder --chown=nextjs:nodejs /app/apps/web/public ./apps/web/public
# Copy workspace packages (needed for migrations)
COPY --from=builder /app/packages ./packages
# Copy root package.json for pnpm monorepo
COPY package.json pnpm-workspace.yaml pnpm-lock.yaml ./
# Create non-root user
RUN addgroup -g 1001 -S nodejs && adduser -S nextjs -u 1001
# Copy entrypoint script
COPY docker/entrypoint.sh /app/entrypoint.sh
RUN chmod +x /app/entrypoint.sh
# Migration files + runner script
COPY --from=builder --chown=nextjs:nodejs /app/packages/db/src/migrations ./packages/db/src/migrations
COPY --chown=nextjs:nodejs scripts/migrate.mjs ./scripts/migrate.mjs
USER nextjs
EXPOSE 3000
ENV PORT=3000
ENV HOSTNAME="0.0.0.0"
ENV PORT 3000
HEALTHCHECK --interval=30s --timeout=3s --start-period=40s --retries=3 \
CMD curl -f http://localhost:3000/api/health || exit 1
CMD ["/app/entrypoint.sh"]
CMD ["node", "apps/web/server.js"]