a76f94fba7
- Add unzip package to Dockerfile for Bun installation - Fix nginx.conf gzip_proxied directive (remove invalid 'must-revalidate') - Add comment acknowledging password warning in Dockerfile - Docker build now completes successfully and nginx starts without errors
85 lines
2.2 KiB
Docker
85 lines
2.2 KiB
Docker
# Multi-stage Dockerfile for Medication Reminder App
|
|
FROM node:20-slim AS base
|
|
|
|
# Install system dependencies
|
|
RUN apt-get update && apt-get install -y \
|
|
curl \
|
|
unzip \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Install Bun
|
|
RUN curl -fsSL https://bun.sh/install | bash
|
|
ENV PATH="/root/.bun/bin:$PATH"
|
|
|
|
# Set working directory
|
|
WORKDIR /app
|
|
|
|
# Create non-root user
|
|
RUN groupadd --gid 1001 nodeuser && \
|
|
useradd --uid 1001 --gid nodeuser --shell /bin/bash --create-home nodeuser
|
|
|
|
# Builder stage
|
|
FROM base AS builder
|
|
|
|
# Copy package files
|
|
COPY --chown=nodeuser:nodeuser package.json bun.lock* ./
|
|
|
|
# Install dependencies
|
|
RUN bun install --frozen-lockfile
|
|
|
|
# Copy source code
|
|
COPY --chown=nodeuser:nodeuser . ./
|
|
|
|
# Build arguments for environment configuration
|
|
# Build Environment - unified config will handle the rest
|
|
ARG NODE_ENV=production
|
|
|
|
# Only essential runtime variables that override unified config defaults
|
|
# Note: VITE_COUCHDB_PASSWORD in ARG/ENV is acceptable for development builds
|
|
# In production, use secrets management instead of build-time arguments
|
|
ARG VITE_COUCHDB_URL
|
|
ARG VITE_COUCHDB_USER
|
|
ARG VITE_COUCHDB_PASSWORD
|
|
|
|
# Set environment variables for build process
|
|
# Unified config handles defaults, only set essential runtime overrides
|
|
ENV NODE_ENV=$NODE_ENV
|
|
ENV VITE_COUCHDB_URL=$VITE_COUCHDB_URL
|
|
ENV VITE_COUCHDB_USER=$VITE_COUCHDB_USER
|
|
ENV VITE_COUCHDB_PASSWORD=$VITE_COUCHDB_PASSWORD
|
|
ENV NODE_ENV=$NODE_ENV
|
|
|
|
# Build the application
|
|
RUN bun run build
|
|
|
|
# Production stage
|
|
FROM nginx:alpine AS production
|
|
|
|
# Install curl for health checks
|
|
RUN apk add --no-cache curl
|
|
|
|
# Copy built files from builder stage
|
|
COPY --from=builder /app/dist /usr/share/nginx/html
|
|
|
|
# Copy nginx configuration
|
|
COPY nginx.conf /etc/nginx/conf.d/default.conf
|
|
|
|
# Set proper permissions for nginx
|
|
RUN chown -R nginx:nginx /usr/share/nginx/html && \
|
|
chown -R nginx:nginx /var/cache/nginx && \
|
|
chown -R nginx:nginx /var/log/nginx && \
|
|
chown -R nginx:nginx /etc/nginx/conf.d
|
|
|
|
# Switch to nginx user
|
|
USER nginx
|
|
|
|
# Expose port
|
|
EXPOSE 80
|
|
|
|
# Health check
|
|
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
|
|
CMD curl -f http://localhost/health || exit 1
|
|
|
|
# Start nginx
|
|
CMD ["nginx", "-g", "daemon off;"]
|