julian
8155ff456b
Containerize the two non-desktop apps for the booth appliance. The desktop app stays on its own tag-only release.yml. - apps/server/Dockerfile: multi-stage node:22-alpine. `pnpm deploy --legacy --prod` (NOT prune — the monorepo native better-sqlite3 won't resolve under a root prune) yields a self-contained bundle; build stage adds node-gyp toolchain, runtime adds libstdc++; non-root, healthcheck. Migrates the mounted DB on boot via a drizzle-kit- free runtime migrator (packages/db/scripts/migrate-runtime.mjs) — drizzle-kit is a devDep, pruned from prod. - apps/server/src/static-spa.ts: Fastify serves the built React SPA (one container serves API + UI). GET-only fallback to index.html, excludes /api + /health so it never shadows the backend; a no-op in dev (no dist). Registered last in server.ts. - apps/vision/Dockerfile: uv base, --extra alpr, model weights PRE-WARMED into the image as the runtime user so fast_alpr boots offline (0 downloads at runtime). Engine env- selected (VISION_RECOGNIZER stub|fast_alpr). - Branch-aware: docker-compose.yml (base) + .dev.yml (build local, stub, ports) + .prod.yml (pull pinned, fast_alpr, vision internal, restart always); REGISTRY/TAG from env so a branch deploy pulls that branch's image. - .gitea/workflows/build-images.yml: on push to dev/main, run the full turbo build+lint+ test gate, then buildx push both images to git.infra.msai.al/mca/parking_solution with branch + branch-<sha> tags (registry cache; optional Komodo webhook behind KOMODO_ENABLED). - .dockerignore excludes **/parking.sqlite* so the signed ledger is NEVER baked. Verified locally (Docker 29): server image migrates + serves API+SPA (/health 200, / + /booth HTML, /api/nope JSON 404, no sqlite outside /data); vision image boots fast_alpr with 0 runtime downloads; compose stack healthy with server→vision over the private network. Wiki: new container-deployment.md; vision-service-packaging open Qs resolved; index + log. Claude-Session: https://claude.ai/code/session_01Xcm6ikLgGoCxxHrxtjkk5V
73 lines
3.5 KiB
Docker
73 lines
3.5 KiB
Docker
# syntax=docker/dockerfile:1.7
|
|
# Parking SERVER image: Fastify API + the bundled React SPA (one container serves both —
|
|
# offline-first single appliance). Build CONTEXT is the REPO ROOT (it's a pnpm/turbo
|
|
# monorepo). better-sqlite3 is a native module → build stage needs node-gyp toolchain,
|
|
# runtime needs libstdc++. Mirrors the house multi-stage pattern (cf. trm/processor).
|
|
# See wiki/decisions/container-deployment.md.
|
|
|
|
# ---- deps: cache-friendly pnpm fetch (only manifests change the layer) ----
|
|
FROM node:22-alpine AS deps
|
|
WORKDIR /app
|
|
RUN apk add --no-cache python3 make g++ # node-gyp for better-sqlite3
|
|
RUN corepack enable && corepack prepare pnpm@10.24.0 --activate
|
|
# Workspace manifests + lock first, so the fetch layer caches across source edits.
|
|
COPY package.json pnpm-lock.yaml pnpm-workspace.yaml turbo.json ./
|
|
COPY apps/server/package.json apps/server/
|
|
COPY apps/web/package.json apps/web/
|
|
COPY apps/vision/package.json apps/vision/
|
|
COPY packages/db/package.json packages/db/
|
|
COPY packages/devices/package.json packages/devices/
|
|
COPY packages/shared/package.json packages/shared/
|
|
RUN --mount=type=cache,id=pnpm-store,target=/root/.local/share/pnpm/store \
|
|
pnpm fetch
|
|
|
|
# ---- build: install (offline from the fetched store) + turbo build everything ----
|
|
FROM deps AS build
|
|
ENV CI=true
|
|
COPY . .
|
|
RUN --mount=type=cache,id=pnpm-store,target=/root/.local/share/pnpm/store \
|
|
pnpm install --frozen-lockfile --offline
|
|
# Builds shared/db/devices, the server dist, AND the web SPA dist (apps/web/dist).
|
|
RUN pnpm turbo run build --filter=@parking/server --filter=@parking/web
|
|
# `pnpm deploy` produces a SELF-CONTAINED prod bundle for the server in /deploy: a hoisted
|
|
# node_modules with only @parking/server's prod deps (incl. the workspace packages' built
|
|
# dist + their native deps like better-sqlite3 — properly linked, unlike `prune` at root).
|
|
RUN --mount=type=cache,id=pnpm-store,target=/root/.local/share/pnpm/store \
|
|
pnpm --filter=@parking/server --legacy deploy --prod /deploy
|
|
# The server's own dist + scripts (deploy copies the package's package.json + files, but we
|
|
# copy dist explicitly so the layout under /deploy is predictable). The web SPA + db
|
|
# migrations are copied in the runtime stage from their build locations.
|
|
|
|
# ---- runtime: slim, non-root ----
|
|
FROM node:22-alpine AS runtime
|
|
WORKDIR /app
|
|
ENV NODE_ENV=production
|
|
RUN apk add --no-cache libstdc++ # better-sqlite3 native runtime
|
|
RUN addgroup -S app && adduser -S -G app app
|
|
|
|
# The self-contained deploy bundle: dist/ + a hoisted node_modules carrying the server's
|
|
# prod deps AND the workspace packages (@parking/db|devices|shared) with their built dist,
|
|
# the drizzle migrations, and the native better-sqlite3 binding. Single COPY — no scattered
|
|
# package dirs, no root node_modules.
|
|
COPY --from=build --chown=app:app /deploy ./
|
|
|
|
# The built SPA — served by Fastify static at WEB_DIST_DIR. (Not part of the server's deploy
|
|
# bundle, so copied from the web build output.)
|
|
COPY --from=build --chown=app:app /app/apps/web/dist ./web/dist
|
|
|
|
# DB lives on a mounted volume (never in the image). Default points at /data.
|
|
ENV DATABASE_URL=/data/parking.sqlite
|
|
ENV WEB_DIST_DIR=/app/web/dist
|
|
ENV HOST=0.0.0.0
|
|
ENV PORT=3000
|
|
RUN mkdir -p /data && chown app:app /data
|
|
VOLUME ["/data"]
|
|
|
|
USER app
|
|
EXPOSE 3000
|
|
HEALTHCHECK --interval=30s --timeout=5s --start-period=15s --retries=3 \
|
|
CMD wget -qO- "http://localhost:${PORT:-3000}/health" >/dev/null 2>&1 || exit 1
|
|
|
|
ENTRYPOINT ["./docker-entrypoint.sh"]
|
|
CMD ["node", "dist/index.js"]
|