88 lines
3.2 KiB
Docker
88 lines
3.2 KiB
Docker
|
# syntax=docker/dockerfile:1.7
|
||
|
|
#
|
||
|
|
# Production image for MEGA PLANT — designed for Coolify.
|
||
|
|
#
|
||
|
|
# Multi-stage build:
|
||
|
|
# 1. deps — fetch and cache npm dependencies
|
||
|
|
# 2. builder — compile the Next.js standalone bundle
|
||
|
|
# 3. runner — minimal runtime image with just the standalone server
|
||
|
|
#
|
||
|
|
# The container listens on ${PORT:-3000} and binds 0.0.0.0 so Coolify's
|
||
|
|
# Traefik proxy can reach it. /api/health is the liveness probe.
|
||
|
|
#
|
||
|
|
# IMPORTANT — NEXT_PUBLIC_PB_URL must be passed as a BUILD ARG, not just a
|
||
|
|
# runtime variable. Next.js inlines NEXT_PUBLIC_* into the client bundle at
|
||
|
|
# build time; setting it only at runtime leaves the browser pointing at
|
||
|
|
# whatever was baked in. See COOLIFY.md.
|
||
|
|
|
||
|
|
# ---------------------------------------------------------------------------
|
||
|
|
# 1. deps
|
||
|
|
# ---------------------------------------------------------------------------
|
||
|
|
FROM node:20-alpine AS deps
|
||
|
|
RUN apk add --no-cache libc6-compat
|
||
|
|
WORKDIR /app
|
||
|
|
|
||
|
|
# Copy only the manifest + lockfile so this layer stays cached for as long
|
||
|
|
# as dependencies don't change.
|
||
|
|
COPY package.json package-lock.json* ./
|
||
|
|
RUN npm ci --no-audit --no-fund
|
||
|
|
|
||
|
|
# ---------------------------------------------------------------------------
|
||
|
|
# 2. builder
|
||
|
|
# ---------------------------------------------------------------------------
|
||
|
|
FROM node:20-alpine AS builder
|
||
|
|
WORKDIR /app
|
||
|
|
|
||
|
|
COPY --from=deps /app/node_modules ./node_modules
|
||
|
|
COPY . .
|
||
|
|
|
||
|
|
# The PocketBase URL is compiled into the client bundle here. Fail loudly
|
||
|
|
# rather than shipping an image that silently talks to the wrong database.
|
||
|
|
ARG NEXT_PUBLIC_PB_URL
|
||
|
|
ENV NEXT_PUBLIC_PB_URL=${NEXT_PUBLIC_PB_URL}
|
||
|
|
RUN test -n "$NEXT_PUBLIC_PB_URL" \
|
||
|
|
|| (echo "" \
|
||
|
|
&& echo "ERROR: build arg NEXT_PUBLIC_PB_URL is required." \
|
||
|
|
&& echo " Coolify -> Build -> Build Arguments -> NEXT_PUBLIC_PB_URL=https://pb.mega.plant.example" \
|
||
|
|
&& echo " Local: docker build --build-arg NEXT_PUBLIC_PB_URL=https://... ." \
|
||
|
|
&& echo "" && exit 1)
|
||
|
|
|
||
|
|
ENV NEXT_TELEMETRY_DISABLED=1
|
||
|
|
ENV NODE_ENV=production
|
||
|
|
|
||
|
|
# `next build --webpack` is deliberate: @ducanh2912/next-pwa is Webpack-only
|
||
|
|
# and is what generates public/sw.js + public/workbox-*.js. Dropping the flag
|
||
|
|
# silently ships an app with no service worker and no offline install.
|
||
|
|
RUN npm run build
|
||
|
|
|
||
|
|
# ---------------------------------------------------------------------------
|
||
|
|
# 3. runner
|
||
|
|
# ---------------------------------------------------------------------------
|
||
|
|
FROM node:20-alpine AS runner
|
||
|
|
WORKDIR /app
|
||
|
|
|
||
|
|
ENV NODE_ENV=production
|
||
|
|
ENV NEXT_TELEMETRY_DISABLED=1
|
||
|
|
ENV PORT=3000
|
||
|
|
ENV HOSTNAME=0.0.0.0
|
||
|
|
|
||
|
|
RUN addgroup --system --gid 1001 nodejs \
|
||
|
|
&& adduser --system --uid 1001 nextjs
|
||
|
|
|
||
|
|
# Static assets — includes the manifest, icons, and the service worker that
|
||
|
|
# next-pwa generated during the build.
|
||
|
|
COPY --from=builder /app/public ./public
|
||
|
|
|
||
|
|
# `output: "standalone"` produces server.js plus a trimmed node_modules, but
|
||
|
|
# does NOT include .next/static — that has to be copied in separately.
|
||
|
|
COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
|
||
|
|
COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
|
||
|
|
|
||
|
|
USER nextjs
|
||
|
|
EXPOSE 3000
|
||
|
|
|
||
|
|
HEALTHCHECK --interval=30s --timeout=10s --start-period=40s --retries=3 \
|
||
|
|
CMD wget -q --spider http://127.0.0.1:3000/api/health || exit 1
|
||
|
|
|
||
|
|
CMD ["node", "server.js"]
|