31 lines
895 B
Text
31 lines
895 B
Text
|
FROM node:20-alpine AS deps
|
||
|
|
WORKDIR /app
|
||
|
|
COPY package.json package-lock.json ./
|
||
|
|
# npm ci is stricter than local macOS npm; install keeps Linux Docker builds reliable.
|
||
|
|
RUN npm install
|
||
|
|
|
||
|
|
FROM node:20-alpine AS builder
|
||
|
|
WORKDIR /app
|
||
|
|
COPY --from=deps /app/node_modules ./node_modules
|
||
|
|
COPY . .
|
||
|
|
ENV NEXT_TELEMETRY_DISABLED=1
|
||
|
|
# Next.js evaluates API routes at build time; auth-secret throws without JWT_SECRET.
|
||
|
|
ENV JWT_SECRET=build-time-placeholder-replaced-at-runtime
|
||
|
|
RUN npm run build
|
||
|
|
|
||
|
|
FROM node:20-alpine AS runner
|
||
|
|
WORKDIR /app
|
||
|
|
ENV NODE_ENV=production
|
||
|
|
ENV PORT=3000
|
||
|
|
ENV HOSTNAME=0.0.0.0
|
||
|
|
|
||
|
|
RUN addgroup --system --gid 1001 nodejs && adduser --system --uid 1001 nextjs
|
||
|
|
|
||
|
|
COPY --from=builder /app/public ./public
|
||
|
|
COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
|
||
|
|
COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
|
||
|
|
|
||
|
|
USER nextjs
|
||
|
|
EXPOSE 3000
|
||
|
|
CMD ["node", "server.js"]
|