103 lines
3.5 KiB
Docker
103 lines
3.5 KiB
Docker
# ============================================
|
|
# Stage 1: Dependencies Installation Stage
|
|
# ============================================
|
|
|
|
# IMPORTANT: Node.js Version Maintenance
|
|
# This Dockerfile uses Node.js 24.13.0-slim, which was the latest LTS version at the time of writing.
|
|
# To ensure security and compatibility, regularly update the NODE_VERSION ARG to the latest LTS version.
|
|
ARG NODE_VERSION=24.13.0-slim
|
|
|
|
FROM node:${NODE_VERSION} AS dependencies
|
|
|
|
# Set working directory
|
|
WORKDIR /app
|
|
|
|
# Copy package-related files first to leverage Docker's caching mechanism
|
|
COPY package.json package-lock.json .npmrc* ./
|
|
|
|
# Install project dependencies with frozen lockfile for reproducible builds
|
|
RUN --mount=type=cache,target=/root/.npm \
|
|
npm ci --no-audit --no-fund
|
|
|
|
# ============================================
|
|
# Stage 2: Build Next.js application in standalone mode
|
|
# ============================================
|
|
|
|
FROM node:${NODE_VERSION} AS builder
|
|
|
|
# Set working directory
|
|
WORKDIR /app
|
|
|
|
# Copy project dependencies from dependencies stage
|
|
COPY --from=dependencies /app/node_modules ./node_modules
|
|
|
|
# Copy application source code
|
|
COPY . .
|
|
|
|
ENV NODE_ENV=production
|
|
ENV BUILD_TIME=${BUILD_TIME}
|
|
|
|
# Next.js collects completely anonymous telemetry data about general usage.
|
|
# Learn more here: https://nextjs.org/telemetry
|
|
# Uncomment the following line in case you want to disable telemetry during the build.
|
|
# ENV NEXT_TELEMETRY_DISABLED=1
|
|
|
|
# Build Next.js application
|
|
# If you want to speed up Docker rebuilds, you can cache the build artifacts
|
|
# by adding: --mount=type=cache,target=/app/.next/cache
|
|
# This caches the .next/cache directory across builds, but it also prevents
|
|
# .next/cache/fetch-cache from being included in the final image, meaning
|
|
# cached fetch responses from the build won't be available at runtime.
|
|
RUN npm run build
|
|
RUN npm run db:generate
|
|
|
|
# ============================================
|
|
# Stage 3: Run Next.js application
|
|
# ============================================
|
|
|
|
FROM node:${NODE_VERSION} AS runner
|
|
|
|
# Set working directory
|
|
WORKDIR /app
|
|
|
|
# Set production environment variables
|
|
ENV NODE_ENV=production
|
|
ENV PORT=3000
|
|
ENV HOSTNAME="0.0.0.0"
|
|
ENV BUILD_TIME=${BUILD_TIME}
|
|
|
|
# Next.js collects completely anonymous telemetry data about general usage.
|
|
# Learn more here: https://nextjs.org/telemetry
|
|
# Uncomment the following line in case you want to disable telemetry during the run time.
|
|
# ENV NEXT_TELEMETRY_DISABLED=1
|
|
|
|
# Copy production assets
|
|
COPY --from=builder --chown=node:node /app/public ./public
|
|
|
|
# Copy drizzle migrations (needed for instrumentation.ts to read SQL files)
|
|
COPY --from=builder --chown=node:node /app/drizzle ./drizzle
|
|
|
|
# Set the correct permission for prerender cache
|
|
RUN mkdir -p .next
|
|
RUN chown node:node .next
|
|
|
|
# Ensure the app directory is writable for database file creation
|
|
RUN chown -R node:node /app
|
|
|
|
# Automatically leverage output traces to reduce image size
|
|
# https://nextjs.org/docs/advanced-features/output-file-tracing
|
|
COPY --from=builder --chown=node:node /app/.next/standalone ./
|
|
COPY --from=builder --chown=node:node /app/.next/static ./.next/static
|
|
|
|
# If you want to persist the fetch cache generated during the build so that
|
|
# cached responses are available immediately on startup, uncomment this line:
|
|
# COPY --from=builder --chown=node:node /app/.next/cache ./.next/cache
|
|
|
|
# Switch to non-root user for security best practices
|
|
USER node
|
|
|
|
# Expose port 3000 to allow HTTP traffic
|
|
EXPOSE 3000
|
|
|
|
# Start Next.js standalone server (migrations run via instrumentation.ts)
|
|
CMD ["node", "server.js"] |