Fix build: collapse deps+builder, add libc6-compat

The cross-stage COPY --from=deps /app/node_modules caused
sh: next: not found in the builder stage. Fix by merging deps
and builder into one stage — npm ci and next build run in the
same layer so node_modules is always present when building.

Also add libc6-compat (required by Next.js SWC binaries on Alpine)
to both builder and runner stages.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Dockerfile

@@ -1,16 +1,16 @@
-# Base image pulled from the Nexus mirror (direct path, no /repository/ prefix).
-# Override for a local build: --build-arg NODE_IMAGE=node:20-alpine
 ARG NODE_IMAGE=mirror.soroushasadi.com/node:20-alpine
 
 # ---------------------------------------------------------------------------
-# 1. Dependencies — installs node_modules and compiles the better-sqlite3
-#    native addon (needs python3 + a C++ toolchain).
+# 1. Builder — installs deps (including native better-sqlite3 compilation)
+#    then produces the standalone Next.js server bundle.
 # ---------------------------------------------------------------------------
-FROM ${NODE_IMAGE} AS deps
+FROM ${NODE_IMAGE} AS builder
 WORKDIR /app
-RUN apk add --no-cache python3 make g++ ca-certificates
-# .npmrc points npm at the Nexus npm-group; NPM_TOKEN (optional) authenticates.
-# The token is appended at build time only — never reaches the runner image.
+
+# libc6-compat: needed by Next.js SWC binaries on Alpine.
+# python3 / make / g++: needed to compile better-sqlite3 native addon.
+RUN apk add --no-cache libc6-compat python3 make g++ ca-certificates
+
 ARG NPM_TOKEN=""
 COPY package.json package-lock.json .npmrc ./
 RUN if [ -n "$NPM_TOKEN" ]; then \
@@ -18,22 +18,19 @@ RUN if [ -n "$NPM_TOKEN" ]; then \
     fi \
   && npm ci
 
-# ---------------------------------------------------------------------------
-# 2. Builder — produces the standalone Next.js server bundle.
-# ---------------------------------------------------------------------------
-FROM ${NODE_IMAGE} AS builder
-WORKDIR /app
 ENV NEXT_TELEMETRY_DISABLED=1
-COPY --from=deps /app/node_modules ./node_modules
 COPY . .
 RUN npm run build
 
 # ---------------------------------------------------------------------------
-# 3. Runner — minimal runtime image. Content DB + uploads live in /data,
-#    which is a mounted volume so they survive image rebuilds.
+# 2. Runner — minimal image. Standalone server + static assets only.
+#    Content DB + uploads live in /data (mounted volume).
 # ---------------------------------------------------------------------------
 FROM ${NODE_IMAGE} AS runner
 WORKDIR /app
+
+RUN apk add --no-cache libc6-compat ca-certificates
+
 ENV NODE_ENV=production \
     NEXT_TELEMETRY_DISABLED=1 \
     PORT=3000 \
@@ -42,13 +39,12 @@ ENV NODE_ENV=production \
 
 RUN addgroup -g 1001 nodejs && adduser -u 1001 -G nodejs -h /home/nextjs -D nextjs
 
-# Standalone server, static assets, and the public/ tree (portfolio art etc.).
 COPY --from=builder /app/.next/standalone ./
 COPY --from=builder /app/.next/static     ./.next/static
 COPY --from=builder /app/public           ./public
 
-# Native module + its loaders. Next's file tracing usually copies these, but
-# we copy the compiled .node and bindings explicitly as a safety net.
+# Native addon compiled in builder on Alpine/musl — copy explicitly as a
+# safety net in case file tracing misses the .node binary.
 COPY --from=builder /app/node_modules/better-sqlite3      ./node_modules/better-sqlite3
 COPY --from=builder /app/node_modules/bindings            ./node_modules/bindings
 COPY --from=builder /app/node_modules/file-uri-to-path    ./node_modules/file-uri-to-path
@@ -58,5 +54,4 @@ USER nextjs
 
 VOLUME ["/data"]
 EXPOSE 3000
-
 CMD ["node", "server.js"]