Josep Piguillem
bf0294a188
Dokploy builds failed with "failed to stat /root/.npmrc": the compose build
secret pointed at ${HOME}/.npmrc, which only exists on a developer machine.
The token now comes from the NEXUS_TOKEN environment variable (Dokploy's
Environment tab or .env), is written to a temporary npmrc and removed in the
same RUN, so it never lands in an image layer.
Also removes a temporary UI dev-server spec that was committed by mistake,
and documents the variable (.env.example, docs 06/07, Word/PDF export).
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
48 lines
2.0 KiB
Docker
48 lines
2.0 KiB
Docker
# syntax=docker/dockerfile:1.7
|
|
# TaskStream images (one Dockerfile, two targets):
|
|
# docker compose up -d --build → api + web + infrastructure
|
|
#
|
|
# @pi/ui comes from Pireon's private Nexus. Its token is passed as a build
|
|
# secret (compose: `secrets.nexus_token` ← $NEXUS_TOKEN) and never lands in a
|
|
# layer: it is written to a temporary npmrc that the same RUN deletes.
|
|
|
|
# ---- Workspace dependencies (shared by both builds) --------------------
|
|
FROM node:22-alpine AS deps
|
|
WORKDIR /workspace
|
|
ENV NX_DAEMON=false NX_NO_CLOUD=true NX_SKIP_NX_CACHE=true
|
|
COPY package.json package-lock.json .npmrc ./
|
|
RUN --mount=type=secret,id=nexus_token,required=true \
|
|
printf '//nexus.pireon.dev/repository/npm-releases/:_authToken=%s\n' "$(cat /run/secrets/nexus_token)" > /tmp/auth.npmrc \
|
|
&& npm ci --no-audit --no-fund --userconfig /tmp/auth.npmrc \
|
|
&& rm -f /tmp/auth.npmrc
|
|
|
|
# ---- API: Nest bundle + pruned package.json / lockfile -----------------
|
|
FROM deps AS build-api
|
|
COPY . .
|
|
RUN npx nx run api:prune
|
|
|
|
FROM node:22-alpine AS api
|
|
WORKDIR /app
|
|
ENV NODE_ENV=production PORT=3000
|
|
# Only the API's runtime dependencies (apps/api/package.json): no frontend
|
|
# packages, nothing from the private registry.
|
|
COPY --from=build-api /workspace/dist/apps/api/package.json /workspace/dist/apps/api/package-lock.json ./
|
|
RUN npm ci --omit=dev --ignore-scripts --no-audit --no-fund && npm cache clean --force
|
|
COPY --from=build-api /workspace/dist/apps/api/main.js ./
|
|
USER node
|
|
EXPOSE 3000
|
|
HEALTHCHECK --interval=10s --timeout=3s --start-period=20s --retries=5 \
|
|
CMD wget -qO- http://127.0.0.1:3000/api/health > /dev/null || exit 1
|
|
CMD ["node", "main.js"]
|
|
|
|
# ---- Web: Angular SPA behind nginx (proxies /api and /graphql) ---------
|
|
FROM deps AS build-web
|
|
COPY . .
|
|
RUN npx nx build web --configuration=production
|
|
|
|
FROM nginx:1.27-alpine AS web
|
|
COPY apps/web/nginx.conf /etc/nginx/conf.d/default.conf
|
|
COPY --from=build-web /workspace/dist/apps/web/browser /usr/share/nginx/html
|
|
EXPOSE 80
|
|
HEALTHCHECK --interval=10s --timeout=3s --retries=5 CMD wget -qO- http://127.0.0.1/ > /dev/null || exit 1
|