discool/Dockerfile at main · dlukt/discool · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
# syntax=docker/dockerfile:1

FROM rust:1.93-bookworm AS chef

ARG DEBIAN_FRONTEND=noninteractive

# Install Node.js 24 LTS + cargo-chef for fast dependency caching.
RUN apt-get update && apt-get install -y --no-install-recommends \
    ca-certificates \
    curl \
    gnupg \
  && curl -fsSL https://deb.nodesource.com/setup_24.x | bash - \
  && apt-get install -y --no-install-recommends nodejs \
  && cargo install cargo-chef --locked \
  && rm -rf /var/lib/apt/lists/*

WORKDIR /app

FROM chef AS planner
COPY server/ ./server/
WORKDIR /app/server
RUN cargo chef prepare --recipe-path recipe.json

FROM chef AS builder
WORKDIR /app/server
COPY --from=planner /app/server/recipe.json recipe.json
RUN cargo chef cook --release --recipe-path recipe.json

# Client build (embedded into the Rust binary via rust-embed at compile time).
WORKDIR /app/client
COPY client/package.json client/package-lock.json ./
RUN npm ci
COPY client/ ./
RUN npm run build

# Server build (release requires client/dist/index.html to exist).
WORKDIR /app/server
COPY server/ ./
RUN cargo build --release

FROM debian:bookworm-slim AS runtime

ARG DEBIAN_FRONTEND=noninteractive

# libssl3 is included for compatibility with common Rust deps; pg_dump is required for backup support.
RUN apt-get update && apt-get install -y --no-install-recommends \
    ca-certificates \
    curl \
    gnupg \
    libssl3 \
  && install -d -m 0755 /etc/apt/keyrings \
  && curl -fsSL https://www.postgresql.org/media/keys/ACCC4CF8.asc \
    | gpg --dearmor -o /etc/apt/keyrings/postgresql.gpg \
  && echo "deb [signed-by=/etc/apt/keyrings/postgresql.gpg] https://apt.postgresql.org/pub/repos/apt bookworm-pgdg main" \
    > /etc/apt/sources.list.d/postgresql-pgdg.list \
  && apt-get update \
  && apt-get install -y --no-install-recommends postgresql-client-16 \
  && apt-get purge -y --auto-remove curl gnupg \
  && rm -rf /var/lib/apt/lists/*

RUN useradd -u 1000 -m -s /bin/bash discool

WORKDIR /app
COPY --from=builder /app/server/target/release/discool-server ./discool-server

USER discool

EXPOSE 3000
CMD ["./discool-server"]