mirror of
https://github.com/seanmorley15/AdventureLog.git
synced 2026-07-30 15:28:30 -04:00
- Expanded .trivyignore to include additional CVEs and clarified comments regarding esbuild vulnerabilities. - Changed the base image in Dockerfile from gcr.io to cgr.dev for the frontend, ensuring up-to-date dependencies.
131 lines
5.8 KiB
Docker
131 lines
5.8 KiB
Docker
# syntax=docker/dockerfile:1
|
|
#
|
|
# Unified AdventureLog image definitions — build from repository root:
|
|
# docker build -f docker/Dockerfile --target frontend -t adventurelog-frontend .
|
|
# docker build -f docker/Dockerfile --target backend -t adventurelog-backend .
|
|
# docker build -f docker/Dockerfile --target aio -t adventurelog .
|
|
#
|
|
# Or: docker buildx bake -f docker/docker-bake.hcl
|
|
|
|
ARG PNPM_VERSION=10.32.1
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# Shared build stages
|
|
# ---------------------------------------------------------------------------
|
|
|
|
FROM node:22-bookworm-slim AS node-runtime
|
|
|
|
FROM cgr.dev/chainguard/node:latest-dev@sha256:6eec455f386d097fc57d8aa73bd06c27ab91faa4f02f9103f94b4c56e0f9a80b AS frontend-build
|
|
ARG PNPM_VERSION
|
|
USER root
|
|
WORKDIR /app
|
|
ENV PNPM_HOME="/pnpm"
|
|
ENV PATH="$PNPM_HOME:$PATH"
|
|
RUN corepack enable && corepack prepare pnpm@${PNPM_VERSION} --activate
|
|
COPY frontend/package.json frontend/pnpm-lock.yaml frontend/pnpm-workspace.yaml frontend/.npmrc* ./
|
|
RUN pnpm install --frozen-lockfile
|
|
COPY frontend/ .
|
|
RUN rm -f .env && pnpm run build
|
|
ENV CI=true
|
|
RUN pnpm prune --prod
|
|
|
|
FROM python:3.13-slim AS backend-builder
|
|
ENV PYTHONDONTWRITEBYTECODE=1
|
|
ENV PYTHONUNBUFFERED=1
|
|
ENV DEBIAN_FRONTEND=noninteractive
|
|
WORKDIR /code
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
git \
|
|
gdal-bin \
|
|
libgdal-dev \
|
|
&& apt-get clean && rm -rf /var/lib/apt/lists/*
|
|
COPY backend/server/requirements.txt /code/
|
|
RUN pip install --upgrade pip \
|
|
&& pip install --no-cache-dir -r requirements.txt
|
|
|
|
# Shared Django runtime used by backend and Standard Deployment images.
|
|
FROM python:3.13-slim AS backend-runtime
|
|
ENV PYTHONDONTWRITEBYTECODE=1
|
|
ENV PYTHONUNBUFFERED=1
|
|
ENV DEBIAN_FRONTEND=noninteractive
|
|
WORKDIR /code
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
ca-certificates \
|
|
postgresql-client \
|
|
gdal-bin \
|
|
nginx \
|
|
memcached \
|
|
supervisor \
|
|
cron \
|
|
fonts-noto-core \
|
|
&& apt-get clean && rm -rf /var/lib/apt/lists/*
|
|
COPY --from=backend-builder /usr/local/lib/python3.13/site-packages /usr/local/lib/python3.13/site-packages
|
|
COPY --from=backend-builder /usr/local/bin /usr/local/bin
|
|
COPY backend/server /code/
|
|
COPY docker/shared/entrypoint-common.sh /code/scripts/entrypoint-common.sh
|
|
COPY backend/cron/adventurelog /etc/cron.d/adventurelog
|
|
COPY backend/scripts/run-cron-job.sh /code/scripts/run-cron-job.sh
|
|
COPY backend/scripts/write-cron-env.sh /code/scripts/write-cron-env.sh
|
|
RUN chmod +x /code/scripts/entrypoint-common.sh /code/scripts/run-cron-job.sh /code/scripts/write-cron-env.sh \
|
|
&& chmod 0644 /etc/cron.d/adventurelog \
|
|
&& mkdir -p /code/static /code/media /var/log/adventurelog /var/lock
|
|
RUN python3 manage.py collectstatic --noinput --verbosity 2
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# Production targets
|
|
# ---------------------------------------------------------------------------
|
|
|
|
FROM cgr.dev/chainguard/node:latest@sha256:27bf957bdf6d189108c8908c958fd966d9814f78e7172c2d791940f4e208a334 AS frontend
|
|
LABEL org.opencontainers.image.title="AdventureLog Frontend" \
|
|
org.opencontainers.image.description="AdventureLog SvelteKit frontend (SSR)." \
|
|
org.opencontainers.image.source="https://github.com/seanmorley15/AdventureLog" \
|
|
org.opencontainers.image.licenses="GPL-3.0"
|
|
WORKDIR /app
|
|
ENV NODE_ENV=production
|
|
COPY --from=frontend-build /app/build ./build
|
|
COPY --from=frontend-build /app/node_modules ./node_modules
|
|
COPY --from=frontend-build /app/package.json ./package.json
|
|
COPY frontend/start.js ./start.js
|
|
EXPOSE 3000
|
|
HEALTHCHECK --interval=30s --timeout=5s --start-period=30s --retries=3 \
|
|
CMD ["node", "-e", "fetch('http://127.0.0.1:3000/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"]
|
|
CMD ["start.js"]
|
|
|
|
FROM backend-runtime AS backend
|
|
LABEL org.opencontainers.image.title="AdventureLog Backend" \
|
|
org.opencontainers.image.description="AdventureLog Django backend with nginx gateway." \
|
|
org.opencontainers.image.source="https://github.com/seanmorley15/AdventureLog" \
|
|
org.opencontainers.image.licenses="GPL-3.0"
|
|
COPY docker/shared/nginx-backend.conf /etc/nginx/nginx.conf
|
|
COPY docker/shared/supervisord-backend.conf /etc/supervisor/conf.d/supervisord.conf
|
|
COPY backend/entrypoint.sh /code/entrypoint.sh
|
|
RUN chmod +x /code/entrypoint.sh
|
|
EXPOSE 80 8000
|
|
HEALTHCHECK --interval=15s --timeout=5s --start-period=60s --retries=5 \
|
|
CMD python3 -c "import urllib.request; urllib.request.urlopen('http://localhost:80/health/')"
|
|
ENTRYPOINT ["/code/entrypoint.sh"]
|
|
CMD ["supervisord", "-c", "/etc/supervisor/conf.d/supervisord.conf"]
|
|
|
|
FROM backend-runtime AS aio
|
|
LABEL org.opencontainers.image.title="AdventureLog Standard Deployment" \
|
|
org.opencontainers.image.description="All-in-one AdventureLog container with frontend and backend on a single port." \
|
|
org.opencontainers.image.source="https://github.com/seanmorley15/AdventureLog" \
|
|
org.opencontainers.image.licenses="GPL-3.0"
|
|
ENV NODE_ENV=production
|
|
COPY --from=node-runtime /usr/local/bin/node /usr/local/bin/node
|
|
RUN ln -sf /usr/local/bin/node /usr/bin/node
|
|
COPY --from=frontend-build /app/build /app/build
|
|
COPY --from=frontend-build /app/node_modules /app/node_modules
|
|
COPY --from=frontend-build /app/package.json /app/package.json
|
|
COPY frontend/start.js /app/start.js
|
|
COPY docker/shared/nginx-aio.conf /etc/nginx/nginx.conf
|
|
COPY docker/shared/supervisord-aio.conf /aio/supervisord.conf
|
|
COPY docker/aio/env-setup.sh /aio/env-setup.sh
|
|
COPY docker/aio/entrypoint.sh /aio/entrypoint.sh
|
|
RUN chmod +x /aio/env-setup.sh /aio/entrypoint.sh
|
|
EXPOSE 80
|
|
HEALTHCHECK --interval=30s --timeout=5s --start-period=90s --retries=5 \
|
|
CMD python3 -c "import urllib.request; urllib.request.urlopen('http://127.0.0.1:80/health')"
|
|
ENTRYPOINT ["/aio/entrypoint.sh"]
|
|
CMD ["supervisord", "-c", "/aio/supervisord.conf"]
|