phantomknight287/saturn

public

The operating system for your freelance business.

add google oauth and update landing page0fdb0595 months ago123 lines · 3.2 KB

1	FROM node:22-alpine AS base
2
3	# Install dependencies only when needed
4	FROM base AS deps
5	RUN apk add --no-cache libc6-compat
6	WORKDIR /app
7
8	COPY package.json bun.lock* package-lock.json* yarn.lock* pnpm-lock.yaml* ./
9	RUN \
10	if [ -f bun.lock ]; then npm i -g bun && bun install --frozen-lockfile; \
11	elif [ -f yarn.lock ]; then yarn --frozen-lockfile; \
12	elif [ -f package-lock.json ]; then npm ci; \
13	elif [ -f pnpm-lock.yaml ]; then corepack enable pnpm && pnpm i --frozen-lockfile; \
14	else echo "No lockfile found." && exit 1; \
15	fi
16
17	# Build the application
18	FROM base AS builder
19	WORKDIR /app
20	COPY --from=deps /app/node_modules ./node_modules
21	COPY . .
22
23	ENV NEXT_TELEMETRY_DISABLED=1
24
25	# Skip env validation during build
26	ARG GITHUB_ACTIONS=true
27
28	# Database
29	ARG DATABASE_URL
30	ENV DATABASE_URL=$DATABASE_URL
31
32	# Auth
33	ARG BETTER_AUTH_SECRET
34	ENV BETTER_AUTH_SECRET=$BETTER_AUTH_SECRET
35	ARG GITHUB_CLIENT_ID
36	ENV GITHUB_CLIENT_ID=$GITHUB_CLIENT_ID
37	ARG GITHUB_CLIENT_SECRET
38	ENV GITHUB_CLIENT_SECRET=$GITHUB_CLIENT_SECRET
39	ARG GOOGLE_CLIENT_ID
40	ENV GOOGLE_CLIENT_ID=$GOOGLE_CLIENT_ID
41	ARG GOOGLE_CLIENT_SECRET
42	ENV GOOGLE_CLIENT_SECRET=$GOOGLE_CLIENT_SECRET
43
44	# Mail
45	ARG MAIL_HOST
46	ENV MAIL_HOST=$MAIL_HOST
47	ARG MAIL_PORT
48	ENV MAIL_PORT=$MAIL_PORT
49	ARG MAIL_USER
50	ENV MAIL_USER=$MAIL_USER
51	ARG MAIL_PASSWORD
52	ENV MAIL_PASSWORD=$MAIL_PASSWORD
53	ARG MAIL_SECURE
54	ENV MAIL_SECURE=$MAIL_SECURE
55	ARG EMAIL_SENDER
56	ENV EMAIL_SENDER=$EMAIL_SENDER
57	ARG EMAIL_PROXY
58	ENV EMAIL_PROXY=$EMAIL_PROXY
59	ARG EMAIL_PROXY_SECRET
60	ENV EMAIL_PROXY_SECRET=$EMAIL_PROXY_SECRET
61
62	# S3
63	ARG S3_ENDPOINT
64	ENV S3_ENDPOINT=$S3_ENDPOINT
65	ARG S3_REGION
66	ENV S3_REGION=$S3_REGION
67	ARG S3_ACCESS_KEY_ID
68	ENV S3_ACCESS_KEY_ID=$S3_ACCESS_KEY_ID
69	ARG S3_SECRET_ACCESS_KEY
70	ENV S3_SECRET_ACCESS_KEY=$S3_SECRET_ACCESS_KEY
71	ARG S3_BUCKET
72	ENV S3_BUCKET=$S3_BUCKET
73
74	ARG NEXT_PUBLIC_BASE_URL
75	ENV NEXT_PUBLIC_BASE_URL=$NEXT_PUBLIC_BASE_URL
76
77	# Polar
78	ARG POLAR_ACCESS_TOKEN
79	ENV POLAR_ACCESS_TOKEN=$POLAR_ACCESS_TOKEN
80	ARG POLAR_PRODUCT_ID
81	ENV POLAR_PRODUCT_ID=$POLAR_PRODUCT_ID
82	ARG POLAR_PRODUCT_SLUG
83	ENV POLAR_PRODUCT_SLUG=$POLAR_PRODUCT_SLUG
84	ARG POLAR_WEBHOOK_SECRET
85	ENV POLAR_WEBHOOK_SECRET=$POLAR_WEBHOOK_SECRET
86
87	RUN \
88	if [ -f bun.lock ]; then npm i -g bun && bun run build; \
89	elif [ -f yarn.lock ]; then yarn build; \
90	elif [ -f package-lock.json ]; then npm run build; \
91	elif [ -f pnpm-lock.yaml ]; then corepack enable pnpm && pnpm build; \
92	fi
93
94	# Compile migration script to a self-contained CJS bundle (drizzle-orm/pg are not in the standalone output's node_modules)
95	RUN npx esbuild src/server/db/migrate.ts --bundle --platform=node --format=cjs --outfile=migrate.cjs
96
97	# Production image
98	FROM base AS runner
99	WORKDIR /app
100
101	ENV NODE_ENV=production
102	ENV NEXT_TELEMETRY_DISABLED=1
103
104	RUN addgroup --system --gid 1001 nodejs
105	RUN adduser --system --uid 1001 nextjs
106
107	COPY --from=builder /app/public ./public
108
109	# Standalone output
110	COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
111	COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
112
113	# Drizzle migrations
114	COPY --from=builder --chown=nextjs:nodejs /app/drizzle ./drizzle
115	COPY --from=builder --chown=nextjs:nodejs /app/migrate.cjs ./migrate.cjs
116
117	USER nextjs
118
119	EXPOSE 3000
120	ENV PORT=3000
121	ENV HOSTNAME="0.0.0.0"
122
123	CMD ["node", "server.js"]