soroush.asadi
20e14d3a28
deploy / deploy (push) Failing after 7m35s
Mirror exposes images as mirror.soroushasadi.com/<image> directly, not via /repository/docker-group/ path. Also node:20-alpine is already cached on the server; node:20-slim was never pulled. Dockerfile: apk instead of apt-get, addgroup/adduser instead of groupadd/useradd (Alpine BusyBox compatibility). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
63 lines
2.6 KiB
Docker
63 lines
2.6 KiB
Docker
# Base image pulled from the Nexus mirror (direct path, no /repository/ prefix).
|
|
# Override for a local build: --build-arg NODE_IMAGE=node:20-alpine
|
|
ARG NODE_IMAGE=mirror.soroushasadi.com/node:20-alpine
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# 1. Dependencies — installs node_modules and compiles the better-sqlite3
|
|
# native addon (needs python3 + a C++ toolchain).
|
|
# ---------------------------------------------------------------------------
|
|
FROM ${NODE_IMAGE} AS deps
|
|
WORKDIR /app
|
|
RUN apk add --no-cache python3 make g++ ca-certificates
|
|
# .npmrc points npm at the Nexus npm-group; NPM_TOKEN (optional) authenticates.
|
|
# The token is appended at build time only — never reaches the runner image.
|
|
ARG NPM_TOKEN=""
|
|
COPY package.json package-lock.json .npmrc ./
|
|
RUN if [ -n "$NPM_TOKEN" ]; then \
|
|
echo "//mirror.soroushasadi.com/repository/npm-group/:_authToken=${NPM_TOKEN}" >> .npmrc ; \
|
|
fi \
|
|
&& npm ci
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# 2. Builder — produces the standalone Next.js server bundle.
|
|
# ---------------------------------------------------------------------------
|
|
FROM ${NODE_IMAGE} AS builder
|
|
WORKDIR /app
|
|
ENV NEXT_TELEMETRY_DISABLED=1
|
|
COPY --from=deps /app/node_modules ./node_modules
|
|
COPY . .
|
|
RUN npm run build
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# 3. Runner — minimal runtime image. Content DB + uploads live in /data,
|
|
# which is a mounted volume so they survive image rebuilds.
|
|
# ---------------------------------------------------------------------------
|
|
FROM ${NODE_IMAGE} AS runner
|
|
WORKDIR /app
|
|
ENV NODE_ENV=production \
|
|
NEXT_TELEMETRY_DISABLED=1 \
|
|
PORT=3000 \
|
|
HOSTNAME=0.0.0.0 \
|
|
DATA_DIR=/data
|
|
|
|
RUN addgroup -g 1001 nodejs && adduser -u 1001 -G nodejs -h /home/nextjs -D nextjs
|
|
|
|
# Standalone server, static assets, and the public/ tree (portfolio art etc.).
|
|
COPY --from=builder /app/.next/standalone ./
|
|
COPY --from=builder /app/.next/static ./.next/static
|
|
COPY --from=builder /app/public ./public
|
|
|
|
# Native module + its loaders. Next's file tracing usually copies these, but
|
|
# we copy the compiled .node and bindings explicitly as a safety net.
|
|
COPY --from=builder /app/node_modules/better-sqlite3 ./node_modules/better-sqlite3
|
|
COPY --from=builder /app/node_modules/bindings ./node_modules/bindings
|
|
COPY --from=builder /app/node_modules/file-uri-to-path ./node_modules/file-uri-to-path
|
|
|
|
RUN mkdir -p /data/uploads && chown -R nextjs:nodejs /data /app
|
|
USER nextjs
|
|
|
|
VOLUME ["/data"]
|
|
EXPOSE 3000
|
|
|
|
CMD ["node", "server.js"]
|