17 lines
653 B
Docker
17 lines
653 B
Docker
|
FROM node:22-bookworm@sha256:0557ac14e0d45d02ed563067b82856ca5e7aa3437fa28d98d4350ea9c3d9494a
|
||
|
|
RUN corepack enable
|
||
|
|
WORKDIR /app
|
||
|
|
# Normalize modes: a restrictive host umask (e.g. 077 on hardened hosts) would otherwise
|
||
|
|
# leave the copied tree unreadable to USER node at runtime.
|
||
|
|
COPY --chmod=755 . .
|
||
|
|
RUN pnpm install --frozen-lockfile
|
||
|
|
RUN pnpm --filter @rakazo/db generate
|
||
|
|
RUN RAKAZO_ALLOW_DEV_SECRETS=1 pnpm --filter @rakazo/web build
|
||
|
|
RUN install -d -m 750 -o node -g node /data /app/apps/web/node_modules/.vite-temp
|
||
|
|
ARG GIT_SHA
|
||
|
|
ENV NODE_ENV=production
|
||
|
|
ENV GIT_SHA=$GIT_SHA
|
||
|
|
EXPOSE 3100 5173 7091
|
||
|
|
USER node
|
||
|
|
CMD ["pnpm", "--filter", "@rakazo/api", "start"]
|