soroush.asadi
fde8b93206
Issues found bringing the stack up locally and fixed:
- Server was loopback-only inside the container (appsettings "Urls=localhost"
wins over ASPNETCORE_URLS) → published port returned "empty reply". Force the
bind with command-line args: ENTRYPOINT dotnet Hokm.Server.dll --urls 0.0.0.0:5005.
- Web image: npm install crashed on alpine ("Exit handler never called"); root
cause was UNABLE_TO_GET_ISSUER_CERT_LOCALLY — the Nexus mirror serves a partial
chain that Node's CA bundle can't complete. Use npm ci + strict-ssl=false.
- .NET restore hit the same partial chain (NU1301 PartialChain). Both registries
are now build ARGs (NUGET_INDEX / NPM_REGISTRY) defaulting to the HTTPS mirror
(CI runner trusts it); local .env overrides to the plain-HTTP Nexus
(http://171.22.25.73:8081) which has no TLS. NuGet feed is generated inline with
allowInsecureConnections so .NET 10 accepts the HTTP source.
Verified on local Docker (Postgres-backed): db+server+web all healthy; API + web
reachable from host on 1505/1500; auth → profile (1000 coins) → friend add/accept
(bidirectional) → chat (unread) all 200; rows persisted in Postgres
(Profiles=2, Friends=2, Messages=1).
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
31 lines
1.5 KiB
Docker
31 lines
1.5 KiB
Docker
# Barg-e Vasat web (Next.js 16 static export → nginx)
|
|
# The app is output:"export" (fully client-side), so we build the static `out/`
|
|
# and serve it with nginx. NEXT_PUBLIC_* are baked at build time.
|
|
# npm ci (deterministic, installs the exact musl optional binaries from the
|
|
# lockfile) — `npm install` crashes here ("Exit handler never called") resolving
|
|
# Next SWC + Tailwind v4 native deps.
|
|
FROM mirror.soroushasadi.com/node:20-alpine AS build
|
|
WORKDIR /app
|
|
COPY package*.json ./
|
|
# npm registry. Default = HTTPS Nexus (CI runner trusts the cert). Override with
|
|
# NPM_REGISTRY=http://<nexus-ip>:8081/repository/npm-group/ for hosts whose trust
|
|
# store lacks the mirror's intermediate (PartialChain) — e.g. local Docker Desktop.
|
|
# strict-ssl=false also tolerates the partial chain when HTTPS is used.
|
|
ARG NPM_REGISTRY=https://mirror.soroushasadi.com/repository/npm-group/
|
|
RUN npm ci --legacy-peer-deps --strict-ssl=false --no-audit --no-fund \
|
|
--registry "${NPM_REGISTRY}"
|
|
COPY . .
|
|
# Live mode + the API origin the BROWSER will use (host-mapped port / LAN IP).
|
|
ARG NEXT_PUBLIC_USE_SERVER=1
|
|
ARG NEXT_PUBLIC_SERVER_URL=http://localhost:1505
|
|
ENV NEXT_PUBLIC_USE_SERVER=$NEXT_PUBLIC_USE_SERVER
|
|
ENV NEXT_PUBLIC_SERVER_URL=$NEXT_PUBLIC_SERVER_URL
|
|
RUN npm run build
|
|
|
|
FROM mirror.soroushasadi.com/nginx:alpine
|
|
COPY --from=build /app/out /usr/share/nginx/html
|
|
COPY nginx.conf /etc/nginx/conf.d/default.conf
|
|
EXPOSE 80
|
|
HEALTHCHECK --interval=10s --timeout=5s --retries=6 --start-period=10s \
|
|
CMD wget -q -O- http://127.0.0.1/ || exit 1
|