Marc Mintel
8ad3abb6f3
Some checks failed
Build & Deploy / 🔍 Prepare (push) Successful in 6s
Build & Deploy / 🧪 QA (push) Successful in 1m0s
Build & Deploy / 🏗️ Build (push) Failing after 15s
Build & Deploy / 🚀 Deploy (push) Has been skipped
Build & Deploy / 🧪 Post-Deploy Verification (push) Has been skipped
Build & Deploy / 🔔 Notify (push) Successful in 1s
Nightly QA / 🔗 Links & Deps (push) Successful in 2m32s
Nightly QA / 🎭 Lighthouse (push) Successful in 3m3s
Nightly QA / 🔍 Static Analysis (push) Failing after 4m43s
Nightly QA / ♿ Accessibility (push) Successful in 5m20s
Nightly QA / 🔔 Notify (push) Successful in 14s
74 lines
2.3 KiB
Docker
74 lines
2.3 KiB
Docker
# Stage 1: Builder
|
|
FROM registry.infra.mintel.me/mintel/nextjs:v1.8.20 AS base
|
|
WORKDIR /app
|
|
|
|
# Arguments for build-time configuration
|
|
ARG NEXT_PUBLIC_BASE_URL
|
|
ARG NEXT_PUBLIC_TARGET
|
|
ARG DIRECTUS_URL
|
|
ARG UMAMI_WEBSITE_ID
|
|
ARG UMAMI_API_ENDPOINT
|
|
|
|
# Environment variables for Next.js build
|
|
ENV NEXT_PUBLIC_BASE_URL=$NEXT_PUBLIC_BASE_URL
|
|
ENV NEXT_PUBLIC_TARGET=$NEXT_PUBLIC_TARGET
|
|
ENV DIRECTUS_URL=$DIRECTUS_URL
|
|
ENV UMAMI_WEBSITE_ID=$UMAMI_WEBSITE_ID
|
|
ENV UMAMI_API_ENDPOINT=$UMAMI_API_ENDPOINT
|
|
ENV SKIP_RUNTIME_ENV_VALIDATION=true
|
|
ENV CI=true
|
|
|
|
# Copy lockfile and manifest for dependency installation caching
|
|
COPY pnpm-lock.yaml package.json .npmrc* ./
|
|
|
|
# Configure private registry and install dependencies
|
|
RUN --mount=type=cache,id=pnpm,target=/pnpm/store \
|
|
--mount=type=secret,id=NPM_TOKEN \
|
|
export NPM_TOKEN=$(cat /run/secrets/NPM_TOKEN) && \
|
|
echo "@mintel:registry=https://git.infra.mintel.me/api/packages/mmintel/npm" > .npmrc && \
|
|
echo "//git.infra.mintel.me/api/packages/mmintel/npm/:_authToken=\${NPM_TOKEN}" >> .npmrc && \
|
|
pnpm store prune && \
|
|
pnpm install --no-frozen-lockfile && \
|
|
rm .npmrc
|
|
|
|
# Copy source code
|
|
COPY . .
|
|
|
|
# Stage 2: Development (Hot-Reloading)
|
|
FROM base AS development
|
|
ENV NODE_ENV=development
|
|
CMD ["pnpm", "dev:local"]
|
|
|
|
# Build application
|
|
# Stage 3: Builder (Production)
|
|
FROM base AS builder
|
|
# Limit memory to 1GB to prevent ResourceExhausted in combination with worker limits
|
|
ENV NODE_OPTIONS="--max-old-space-size=1024"
|
|
|
|
# Force Turbopack (Rust/Rayon) and Node.js to use strictly 3 threads to avoid starving the Gitea Runner VPS CPU
|
|
ENV RAYON_NUM_THREADS=3
|
|
ENV UV_THREADPOOL_SIZE=3
|
|
|
|
RUN pnpm build
|
|
|
|
# Stage 2: Runner
|
|
FROM registry.infra.mintel.me/mintel/runtime:v1.8.20 AS runner
|
|
WORKDIR /app
|
|
|
|
# Create nextjs user and group (standardized in runtime image but ensuring local ownership)
|
|
USER root
|
|
RUN chown -R nextjs:nodejs /app
|
|
USER nextjs
|
|
|
|
ENV HOSTNAME="0.0.0.0"
|
|
ENV PORT=3000
|
|
ENV NODE_ENV=production
|
|
|
|
# Copy standalone output and static files
|
|
COPY --from=builder --chown=nextjs:nodejs /app/public ./public
|
|
COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
|
|
COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
|
|
COPY --from=builder --chown=nextjs:nodejs /app/.next/cache ./.next/cache
|
|
|
|
CMD ["node", "server.js"]
|