hamid
48 lines
2.1 KiB
Docker
48 lines
2.1 KiB
Docker
# Balinyaar web client — build context is `client/` (see the root docker-compose.yml).
|
|
#
|
|
# NEXT_PUBLIC_* values are inlined into the browser bundle by `next build`, so the API URL and site origin
|
|
# are BUILD-time inputs, not runtime env vars — setting them in compose would do nothing. They come from the
|
|
# committed .env.production, which `next build` reads because it runs with NODE_ENV=production; change a value
|
|
# there and rebuild the image.
|
|
|
|
FROM node:24-alpine AS deps
|
|
WORKDIR /app
|
|
COPY package.json package-lock.json ./
|
|
|
|
# package-lock.json is generated on Windows, where npm filters out the wasm32-only optional packages and so
|
|
# never records their transitive deps (@emnapi/core, @emnapi/runtime). On Linux npm does want them, and a
|
|
# bare `npm ci` dies on the lockfile-sync check. --omit=optional is NOT the fix: Turbopack's @parcel/watcher
|
|
# resolves its native binary through optionalDependencies, so omitting them breaks `next build` outright.
|
|
#
|
|
# So: complete the lock here, on the platform that can actually see those packages, then install from it.
|
|
# --package-lock-only reuses every version already pinned in the committed lock and only ADDS the missing
|
|
# Linux-side entries, so this stays effectively reproducible rather than a free-for-all `npm install`.
|
|
# Drop the first command once the committed lock is generated on Linux (see DEPLOY.md).
|
|
RUN npm install --package-lock-only --no-audit --no-fund \
|
|
&& npm ci --no-audit --no-fund
|
|
|
|
FROM node:24-alpine AS build
|
|
WORKDIR /app
|
|
COPY --from=deps /app/node_modules ./node_modules
|
|
COPY . .
|
|
|
|
ENV NEXT_TELEMETRY_DISABLED=1
|
|
RUN npm run build
|
|
|
|
FROM node:24-alpine AS final
|
|
WORKDIR /app
|
|
ENV NODE_ENV=production
|
|
ENV NEXT_TELEMETRY_DISABLED=1
|
|
ENV PORT=3000
|
|
ENV HOSTNAME=0.0.0.0
|
|
|
|
# `output: 'standalone'` traces the runtime dependencies into .next/standalone; static assets and public/
|
|
# are deliberately NOT included in that trace and must be copied alongside it, or every asset 404s.
|
|
COPY --from=build --chown=node:node /app/.next/standalone ./
|
|
COPY --from=build --chown=node:node /app/.next/static ./.next/static
|
|
COPY --from=build --chown=node:node /app/public ./public
|
|
|
|
USER node
|
|
EXPOSE 3000
|
|
CMD ["node", "server.js"]
|