feat: prepare Coolify production deployment #476
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,71 +1,106 @@ | ||
| # syntax=docker/dockerfile:1 | ||
|
|
||
| # glibc base — the repo pins linux-x64-gnu native binaries (sharp, rollup, | ||
| # tailwindcss/oxide, lightningcss) that do not resolve on Alpine/musl. | ||
| ARG NODE_IMAGE=node:22-bookworm-slim | ||
|
|
||
| FROM ${NODE_IMAGE} AS base | ||
| RUN apt-get update \ | ||
|
There was a problem hiding this comment. P3: The app-stage image installs Prompt for AI agents |
||
| && apt-get install -y --no-install-recommends openssl ca-certificates \ | ||
| && rm -rf /var/lib/apt/lists/* \ | ||
| && corepack enable | ||
| WORKDIR /app | ||
| ENV PNPM_HOME="/pnpm" | ||
| ENV PATH="$PNPM_HOME:$PATH" | ||
| # Pin pnpm to match package.json#packageManager (pnpm@11.5.2). | ||
| RUN corepack prepare pnpm@11.5.2 --activate | ||
|
|
||
| # Development: retained for docker-compose.yml and scripts/docker-dev.sh. | ||
| FROM base AS dev | ||
| ARG DATABASE_URL=postgresql://docker-build.invalid/emuready | ||
| ARG DATABASE_DIRECT_URL | ||
| COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./ | ||
| RUN pnpm install --frozen-lockfile --ignore-scripts | ||
| COPY . . | ||
| RUN DATABASE_URL="${DATABASE_URL}" DATABASE_DIRECT_URL="${DATABASE_DIRECT_URL:-${DATABASE_URL}}" \ | ||
| pnpm exec prisma generate | ||
| EXPOSE 3000 | ||
| CMD ["pnpm", "dev"] | ||
|
|
||
| # The build database must be migrated and disposable. Prisma TypedSQL inspects it. | ||
| FROM base AS builder | ||
| ARG DATABASE_URL | ||
| ARG DATABASE_DIRECT_URL | ||
| ARG NEXT_IMAGE_UNOPTIMIZED | ||
| ARG NEXT_PUBLIC_ALLOWED_ORIGINS | ||
| ARG NEXT_PUBLIC_ANDROID_LATEST_APK_URL | ||
| ARG NEXT_PUBLIC_ANDROID_LATEST_JSON_URL | ||
| ARG NEXT_PUBLIC_APP_ENV | ||
| ARG NEXT_PUBLIC_APP_URL | ||
| ARG NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY | ||
| ARG NEXT_PUBLIC_DISABLE_COOKIE_BANNER | ||
| ARG NEXT_PUBLIC_DISCORD_LINK | ||
| ARG NEXT_PUBLIC_EMUREADY_BETA_URL | ||
| ARG NEXT_PUBLIC_EMUREADY_EMAIL | ||
| ARG NEXT_PUBLIC_EMUREADY_LITE_GITHUB_URL | ||
| ARG NEXT_PUBLIC_ENABLE_ANALYTICS | ||
| ARG NEXT_PUBLIC_ENABLE_ANDROID_DOWNLOADS | ||
| ARG NEXT_PUBLIC_ENABLE_KOFI_WIDGET | ||
| ARG NEXT_PUBLIC_ENABLE_PATREON_VERIFICATION | ||
| ARG NEXT_PUBLIC_ENABLE_SENTRY | ||
| ARG NEXT_PUBLIC_ENABLE_SW | ||
| ARG NEXT_PUBLIC_GA_ID | ||
| ARG NEXT_PUBLIC_GITHUB_URL | ||
| ARG NEXT_PUBLIC_IGDB_CLIENT_ID | ||
| ARG NEXT_PUBLIC_KOFI_LINK | ||
| ARG NEXT_PUBLIC_LOCAL_STORAGE_PREFIX | ||
| ARG NEXT_PUBLIC_PATREON_LINK | ||
| ARG NEXT_PUBLIC_R2_PUBLIC_BASE_URL | ||
| ARG NEXT_PUBLIC_R2_UPLOADS_PUBLIC_BASE_URL | ||
| ARG NEXT_PUBLIC_TURNSTILE_SITE_KEY | ||
| ARG NEXT_PUBLIC_TWITTER_URL | ||
| ARG NEXT_BUILD_ID | ||
| COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./ | ||
| RUN pnpm install --frozen-lockfile --ignore-scripts | ||
| COPY . . | ||
| ENV NEXT_TELEMETRY_DISABLED=1 | ||
| RUN pnpm version:sync | ||
| RUN DATABASE_URL="${DATABASE_URL}" DATABASE_DIRECT_URL="${DATABASE_DIRECT_URL:-${DATABASE_URL}}" \ | ||
| NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY="${NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY}" \ | ||
| NEXT_PUBLIC_R2_PUBLIC_BASE_URL="${NEXT_PUBLIC_R2_PUBLIC_BASE_URL}" \ | ||
| NEXT_PUBLIC_R2_UPLOADS_PUBLIC_BASE_URL="${NEXT_PUBLIC_R2_UPLOADS_PUBLIC_BASE_URL}" \ | ||
| NEXT_IMAGE_UNOPTIMIZED="${NEXT_IMAGE_UNOPTIMIZED}" \ | ||
| NEXT_BUILD_ID="${NEXT_BUILD_ID}" \ | ||
| pnpm build | ||
|
|
||
| # One-shot migration image. DATABASE_DIRECT_URL is supplied at runtime. | ||
| FROM base AS migrator | ||
| COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./ | ||
| RUN pnpm install --frozen-lockfile --ignore-scripts | ||
| COPY prisma.config.ts ./ | ||
| COPY prisma ./prisma | ||
| CMD ["pnpm", "exec", "prisma", "migrate", "deploy"] | ||
|
|
||
| # Standalone Next.js runtime. | ||
| FROM ${NODE_IMAGE} AS app | ||
| ARG NEXT_BUILD_ID | ||
| WORKDIR /app | ||
| ENV NODE_ENV=production \ | ||
| HOSTNAME=0.0.0.0 \ | ||
| PORT=3000 \ | ||
| APP_VERSION=${NEXT_BUILD_ID} \ | ||
| NEXT_TELEMETRY_DISABLED=1 | ||
| RUN apt-get update \ | ||
| && apt-get install -y --no-install-recommends curl \ | ||
|
Comment on lines
+93
to
+94
There was a problem hiding this comment. 🩺 Stability & Availability | 🟡 Minor | ⚡ Quick win Bind the healthcheck to Line 90 makes
♻️ Proposed change RUN apt-get update \
- && apt-get install -y --no-install-recommends curl \
- && rm -rf /var/lib/apt/lists/* \
- && groupadd --system --gid 1001 nodejs \
+ && groupadd --system --gid 1001 nodejs \
&& useradd --system --uid 1001 --gid 1001 --create-home nextjs
@@
HEALTHCHECK --interval=30s --timeout=5s --start-period=40s --retries=3 \
- CMD node -e "fetch('http://127.0.0.1:3000/api/health/live').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"
+ CMD node -e "fetch('http://127.0.0.1:'+(process.env.PORT||3000)+'/api/health/live').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"Also applies to: 104-105 🧰 Tools🪛 Hadolint (2.15.1)[warning] 93-93: Pin versions in apt get install. Instead of (DL3008) 🤖 Prompt for AI AgentsSource: Linters/SAST tools |
||
| && rm -rf /var/lib/apt/lists/* \ | ||
| && groupadd --system --gid 1001 nodejs \ | ||
| && useradd --system --uid 1001 --gid 1001 --create-home nextjs | ||
| COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./ | ||
| COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static | ||
| COPY --from=builder --chown=nextjs:nodejs /app/public ./public | ||
| COPY --from=builder --chown=nextjs:nodejs /app/docs/MOBILE_API.md ./docs/MOBILE_API.md | ||
| USER nextjs | ||
| EXPOSE 3000 | ||
| HEALTHCHECK --interval=30s --timeout=5s --start-period=40s --retries=3 \ | ||
| CMD node -e "fetch('http://127.0.0.1:'+(process.env.PORT||'3000')+'/api/health/live').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))" | ||
| CMD ["node", "server.js"] | ||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
P1: When building the production image,
docs/remains excluded, so this exception cannot makeMOBILE_API.mdavailable to the builder. The laterCOPY --from=builder /app/docs/MOBILE_API.mdtherefore fails; re-include the parent directory before re-including the file.Prompt for AI agents