Template
Gabriel Brown
7d1884be41
CI reads Infisical staging as the read-only convexmonorepo-ci machine identity, deploys the Convex functions, builds and pushes the image, and asks the VPS to redeploy. Payload schema changes now ship as migrations that production runs on startup; the baseline matches the production schema and is recorded as applied there. The local stack moves to its own ports and syncs the Convex runtime env, and the scripts pick up Infisical account switching, dev-kill and a cache-safe CI install.
71 lines
2.0 KiB
Docker
71 lines
2.0 KiB
Docker
# syntax=docker/dockerfile:1
|
|
FROM docker.io/oven/bun:1.3.14-alpine AS base
|
|
|
|
# Builder stage
|
|
FROM base AS builder
|
|
RUN apk add --no-cache curl libc6-compat
|
|
WORKDIR /app
|
|
|
|
ARG SENTRY_AUTH_TOKEN
|
|
ARG SENTRY_DISABLE_AUTO_UPLOAD=false
|
|
ARG NEXT_PUBLIC_SITE_URL
|
|
ARG NEXT_PUBLIC_CONVEX_URL
|
|
ARG NEXT_PUBLIC_PLAUSIBLE_SRC
|
|
ARG NEXT_PUBLIC_POSTHOG_KEY
|
|
ARG NEXT_PUBLIC_POSTHOG_HOST
|
|
ARG NEXT_PUBLIC_SENTRY_DSN
|
|
ARG NEXT_PUBLIC_SENTRY_URL
|
|
ARG NEXT_PUBLIC_SENTRY_ORG
|
|
ARG NEXT_PUBLIC_SENTRY_PROJECT_NAME
|
|
ARG PAYLOAD_SECRET
|
|
ARG PAYLOAD_DB_URL
|
|
|
|
ENV SENTRY_AUTH_TOKEN=$SENTRY_AUTH_TOKEN
|
|
ENV SENTRY_DISABLE_AUTO_UPLOAD=$SENTRY_DISABLE_AUTO_UPLOAD
|
|
ENV NEXT_PUBLIC_SITE_URL=$NEXT_PUBLIC_SITE_URL
|
|
ENV NEXT_PUBLIC_CONVEX_URL=$NEXT_PUBLIC_CONVEX_URL
|
|
ENV NEXT_PUBLIC_PLAUSIBLE_SRC=$NEXT_PUBLIC_PLAUSIBLE_SRC
|
|
ENV NEXT_PUBLIC_POSTHOG_KEY=$NEXT_PUBLIC_POSTHOG_KEY
|
|
ENV NEXT_PUBLIC_POSTHOG_HOST=$NEXT_PUBLIC_POSTHOG_HOST
|
|
ENV NEXT_PUBLIC_SENTRY_DSN=$NEXT_PUBLIC_SENTRY_DSN
|
|
ENV NEXT_PUBLIC_SENTRY_URL=$NEXT_PUBLIC_SENTRY_URL
|
|
ENV NEXT_PUBLIC_SENTRY_ORG=$NEXT_PUBLIC_SENTRY_ORG
|
|
ENV NEXT_PUBLIC_SENTRY_PROJECT_NAME=$NEXT_PUBLIC_SENTRY_PROJECT_NAME
|
|
ENV PAYLOAD_SECRET=$PAYLOAD_SECRET
|
|
ENV PAYLOAD_DB_URL=$PAYLOAD_DB_URL
|
|
|
|
# Copy source code (node_modules excluded via .dockerignore)
|
|
COPY . .
|
|
|
|
# Install all dependencies
|
|
ENV HUSKY=0
|
|
RUN bun install --frozen-lockfile
|
|
|
|
# Build with proper environment
|
|
ENV NEXT_TELEMETRY_DISABLED=1
|
|
ENV NODE_ENV=production
|
|
RUN sh scripts/build-next-bundle
|
|
RUN bun scripts/copy-next-runtime-deps.mjs
|
|
|
|
# Runner stage
|
|
FROM docker.io/library/node:22-alpine AS runner
|
|
WORKDIR /app
|
|
|
|
ENV NODE_ENV=production
|
|
ENV NEXT_TELEMETRY_DISABLED=1
|
|
|
|
RUN addgroup --system --gid 1001 nodejs && \
|
|
adduser --system --uid 1001 nextjs
|
|
|
|
# Copy built application
|
|
COPY --from=builder --chown=nextjs:nodejs /app/apps/next/.next/standalone ./
|
|
COPY --from=builder --chown=nextjs:nodejs /app/apps/next/.next/static ./apps/next/.next/static
|
|
COPY --from=builder --chown=nextjs:nodejs /app/apps/next/public ./apps/next/public
|
|
|
|
USER nextjs
|
|
EXPOSE 3000
|
|
ENV PORT=3000
|
|
ENV HOSTNAME="0.0.0.0"
|
|
|
|
CMD ["node", "apps/next/server.js"]
|