mirror of
https://github.com/mauriceboe/TREK.git
synced 2026-06-19 21:31:46 +00:00
Maurice
0b218d53b2
Co-hosted NestJS app behind the existing Express server via a strangler-fig dispatcher, sharing the same better-sqlite3 connection and JWT httpOnly cookie. Additive and dormant: default routing stays on Express, Nest only serves its own /api/_nest diagnostics until a module opts in. F1 @trek/shared Zod contract package; F2 Nest bootstrap co-hosted (fall-through, single Dockerfile/port); F3 shared better-sqlite3 provider; F4 JWT cookie auth guard (+ @CurrentUser, admin guard); F5 Zod validation pipe + error-envelope parity; F6 Nest test + coverage gates; F7 per-prefix strangler toggle (env, default Express); F8 CI build/typecheck/test/coverage. Remaining F4/F6/F8 checklist items (trip-access + permission levels + MFA policy, e2e harness/seed + 80% gate, Nest↔Express parity test, Playwright PR-comment workflow) are tracked on the first consuming module cards (L1/A1/C1).
53 lines
1.8 KiB
Docker
53 lines
1.8 KiB
Docker
# Stage 1: Build React client
|
|
FROM node:24-alpine AS client-builder
|
|
WORKDIR /app/client
|
|
COPY client/package*.json ./
|
|
RUN npm ci
|
|
COPY client/ ./
|
|
RUN npm run build
|
|
|
|
# Stage 2: Build server (TypeScript -> dist via tsc + tsc-alias)
|
|
# --ignore-scripts: tsc only transpiles, so we skip native builds (better-sqlite3)
|
|
# here; the production stage builds the native module.
|
|
FROM node:24-alpine AS server-builder
|
|
WORKDIR /app
|
|
COPY server/package*.json ./
|
|
RUN npm ci --ignore-scripts
|
|
COPY server/ ./
|
|
RUN npm run build
|
|
|
|
# Stage 3: Production server (runs the compiled JS — NestJS DI needs the
|
|
# decorator metadata that tsc emits; the old tsx runtime did not).
|
|
FROM node:24-alpine
|
|
|
|
WORKDIR /app
|
|
|
|
# Timezone support + native deps (better-sqlite3 needs build tools)
|
|
COPY server/package*.json ./
|
|
RUN apk add --no-cache tzdata dumb-init su-exec python3 make g++ && \
|
|
npm ci --production && \
|
|
rm package-lock.json && \
|
|
apk del python3 make g++ && \
|
|
rm -rf /usr/local/lib/node_modules/npm /usr/local/bin/npm /usr/local/bin/npx
|
|
|
|
COPY --from=server-builder /app/dist ./dist
|
|
COPY --from=client-builder /app/client/dist ./public
|
|
COPY --from=client-builder /app/client/public/fonts ./public/fonts
|
|
|
|
RUN mkdir -p /app/data/logs /app/uploads/files /app/uploads/covers /app/uploads/avatars /app/uploads/photos && \
|
|
mkdir -p /app/server && ln -s /app/uploads /app/server/uploads && ln -s /app/data /app/server/data && \
|
|
chown -R node:node /app
|
|
|
|
ENV NODE_ENV=production
|
|
ENV PORT=3000
|
|
ARG APP_VERSION=dev
|
|
ENV APP_VERSION=${APP_VERSION}
|
|
|
|
EXPOSE 3000
|
|
|
|
HEALTHCHECK --interval=30s --timeout=5s --start-period=15s --retries=3 \
|
|
CMD wget -qO- http://localhost:3000/api/health || exit 1
|
|
|
|
ENTRYPOINT ["dumb-init", "--"]
|
|
CMD ["sh", "-c", "chown -R node:node /app/data /app/uploads 2>/dev/null || true; exec su-exec node node dist/index.js"]
|