Marc Mintel
4e72a0baac
Some checks failed
Monorepo Pipeline / ⚡ Prioritize Release (push) Successful in 1s
Monorepo Pipeline / 🧪 Test (push) Successful in 46s
Monorepo Pipeline / 🧹 Lint (push) Successful in 1m48s
Monorepo Pipeline / 🏗️ Build (push) Successful in 1m48s
Monorepo Pipeline / 🚀 Release (push) Has been skipped
Monorepo Pipeline / 🐳 Build Gatekeeper (Product) (push) Has been skipped
Monorepo Pipeline / 🐳 Build Build-Base (push) Has been skipped
Monorepo Pipeline / 🐳 Build Production Runtime (push) Has been skipped
🏥 Server Maintenance / 🧹 Prune & Clean (push) Failing after 4s
59 lines
2.4 KiB
Docker
59 lines
2.4 KiB
Docker
# Step 1: Builder stage
|
|
FROM node:20-alpine AS builder
|
|
RUN apk add --no-cache libc6-compat curl python3 make g++ pkgconfig pixman-dev cairo-dev pango-dev
|
|
WORKDIR /app
|
|
RUN corepack enable pnpm
|
|
ENV CI=true
|
|
|
|
# Copy manifest files specifically for better layer caching
|
|
COPY pnpm-lock.yaml pnpm-workspace.yaml package.json .npmrc ./
|
|
COPY packages/gatekeeper/package.json ./packages/gatekeeper/package.json
|
|
COPY packages/next-utils/package.json ./packages/next-utils/package.json
|
|
COPY packages/eslint-config/package.json ./packages/eslint-config/package.json
|
|
COPY packages/next-config/package.json ./packages/next-config/package.json
|
|
COPY packages/tsconfig/package.json ./packages/tsconfig/package.json
|
|
COPY packages/infra/package.json ./packages/infra/package.json
|
|
|
|
COPY packages/mail/package.json ./packages/mail/package.json
|
|
COPY packages/cli/package.json ./packages/cli/package.json
|
|
COPY packages/observability/package.json ./packages/observability/package.json
|
|
COPY packages/next-observability/package.json ./packages/next-observability/package.json
|
|
COPY packages/husky-config/package.json ./packages/husky-config/package.json
|
|
|
|
# Use a secret for NPM_TOKEN and a cache mount for the pnpm store
|
|
RUN --mount=type=cache,id=pnpm,target=/pnpm/store \
|
|
--mount=type=secret,id=NPM_TOKEN \
|
|
export NPM_TOKEN=$(cat /run/secrets/NPM_TOKEN) && \
|
|
pnpm config set store-dir /pnpm/store && \
|
|
pnpm i --no-frozen-lockfile
|
|
|
|
# Copy the rest of the source
|
|
COPY . .
|
|
|
|
# Build Gatekeeper and its dependencies
|
|
RUN --mount=type=cache,target=/app/packages/gatekeeper/.next/cache \
|
|
pnpm --filter @mintel/gatekeeper... build
|
|
RUN mkdir -p packages/gatekeeper/public
|
|
|
|
# Step 2: Runner stage
|
|
FROM node:20-alpine AS runner
|
|
RUN apk add --no-cache libc6-compat curl
|
|
WORKDIR /app
|
|
ENV NODE_ENV=production
|
|
RUN addgroup --system --gid 1001 nodejs
|
|
RUN adduser --system --uid 1001 nextjs
|
|
|
|
# Set the correct permission for prerender cache
|
|
RUN mkdir -p packages/gatekeeper/.next && chown nextjs:nodejs packages/gatekeeper/.next
|
|
|
|
COPY --from=builder --chown=nextjs:nodejs /app/packages/gatekeeper/public ./packages/gatekeeper/public
|
|
COPY --from=builder --chown=nextjs:nodejs /app/packages/gatekeeper/.next/standalone ./
|
|
COPY --from=builder --chown=nextjs:nodejs /app/packages/gatekeeper/.next/static ./packages/gatekeeper/.next/static
|
|
|
|
USER nextjs
|
|
EXPOSE 3000
|
|
ENV PORT=3000
|
|
ENV HOSTNAME="0.0.0.0"
|
|
|
|
CMD ["node", "packages/gatekeeper/server.js"]
|