| 1 | FROM node:22-alpine AS base |
| 2 | |
| 3 | # Install dependencies only when needed |
| 4 | FROM base AS deps |
| 5 | RUN apk add --no-cache libc6-compat |
| 6 | WORKDIR /app |
| 7 | |
| 8 | COPY package.json bun.lock* package-lock.json* yarn.lock* pnpm-lock.yaml* ./ |
| 9 | RUN \ |
| 10 | if [ -f bun.lock ]; then npm i -g bun && bun install --frozen-lockfile; \ |
| 11 | elif [ -f yarn.lock ]; then yarn --frozen-lockfile; \ |
| 12 | elif [ -f package-lock.json ]; then npm ci; \ |
| 13 | elif [ -f pnpm-lock.yaml ]; then corepack enable pnpm && pnpm i --frozen-lockfile; \ |
| 14 | else echo "No lockfile found." && exit 1; \ |
| 15 | fi |
| 16 | |
| 17 | # Build the application |
| 18 | FROM base AS builder |
| 19 | WORKDIR /app |
| 20 | COPY --from=deps /app/node_modules ./node_modules |
| 21 | COPY . . |
| 22 | |
| 23 | ENV NEXT_TELEMETRY_DISABLED=1 |
| 24 | |
| 25 | # Skip env validation during build |
| 26 | ARG GITHUB_ACTIONS=true |
| 27 | |
| 28 | # Database |
| 29 | ARG DATABASE_URL |
| 30 | ENV DATABASE_URL=$DATABASE_URL |
| 31 | |
| 32 | # Auth |
| 33 | ARG BETTER_AUTH_SECRET |
| 34 | ENV BETTER_AUTH_SECRET=$BETTER_AUTH_SECRET |
| 35 | ARG GITHUB_CLIENT_ID |
| 36 | ENV GITHUB_CLIENT_ID=$GITHUB_CLIENT_ID |
| 37 | ARG GITHUB_CLIENT_SECRET |
| 38 | ENV GITHUB_CLIENT_SECRET=$GITHUB_CLIENT_SECRET |
| 39 | |
| 40 | # Mail |
| 41 | ARG MAIL_HOST |
| 42 | ENV MAIL_HOST=$MAIL_HOST |
| 43 | ARG MAIL_PORT |
| 44 | ENV MAIL_PORT=$MAIL_PORT |
| 45 | ARG MAIL_USER |
| 46 | ENV MAIL_USER=$MAIL_USER |
| 47 | ARG MAIL_PASSWORD |
| 48 | ENV MAIL_PASSWORD=$MAIL_PASSWORD |
| 49 | ARG MAIL_SECURE |
| 50 | ENV MAIL_SECURE=$MAIL_SECURE |
| 51 | |
| 52 | # S3 |
| 53 | ARG S3_ENDPOINT |
| 54 | ENV S3_ENDPOINT=$S3_ENDPOINT |
| 55 | ARG S3_REGION |
| 56 | ENV S3_REGION=$S3_REGION |
| 57 | ARG S3_ACCESS_KEY_ID |
| 58 | ENV S3_ACCESS_KEY_ID=$S3_ACCESS_KEY_ID |
| 59 | ARG S3_SECRET_ACCESS_KEY |
| 60 | ENV S3_SECRET_ACCESS_KEY=$S3_SECRET_ACCESS_KEY |
| 61 | ARG S3_BUCKET |
| 62 | ENV S3_BUCKET=$S3_BUCKET |
| 63 | |
| 64 | ARG NEXT_PUBLIC_BASE_URL |
| 65 | ENV NEXT_PUBLIC_BASE_URL=$NEXT_PUBLIC_BASE_URL |
| 66 | |
| 67 | RUN \ |
| 68 | if [ -f bun.lock ]; then npm i -g bun && bun run build; \ |
| 69 | elif [ -f yarn.lock ]; then yarn build; \ |
| 70 | elif [ -f package-lock.json ]; then npm run build; \ |
| 71 | elif [ -f pnpm-lock.yaml ]; then corepack enable pnpm && pnpm build; \ |
| 72 | fi |
| 73 | |
| 74 | # Production image |
| 75 | FROM base AS runner |
| 76 | WORKDIR /app |
| 77 | |
| 78 | ENV NODE_ENV=production |
| 79 | ENV NEXT_TELEMETRY_DISABLED=1 |
| 80 | |
| 81 | RUN addgroup --system --gid 1001 nodejs |
| 82 | RUN adduser --system --uid 1001 nextjs |
| 83 | |
| 84 | COPY --from=builder /app/public ./public |
| 85 | |
| 86 | # Standalone output |
| 87 | COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./ |
| 88 | COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static |
| 89 | |
| 90 | USER nextjs |
| 91 | |
| 92 | EXPOSE 3000 |
| 93 | ENV PORT=3000 |
| 94 | ENV HOSTNAME="0.0.0.0" |
| 95 | |
| 96 | CMD ["node", "server.js"] |