Matt
2e8c4b43bf
The DR backup engine spawns `pg_dump` (backup.service.ts), but neither runner image installed a postgres client — so producing a bundle fails in prod with ENOENT (only worked in dev, where the host has pg_dump). Surfaced by testing the feature on the live prod container. Add `postgresql16-client` (pg_dump 16.x, matched to the postgres:16 server) to the runner stage of Dockerfile (crm-app: on-demand export + "back up now") and Dockerfile.worker (scheduled backup-push cron). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
70 lines
3.4 KiB
Docker
70 lines
3.4 KiB
Docker
# Stage 1: Install dependencies
|
|
FROM node:20-alpine AS deps
|
|
RUN corepack enable && corepack prepare pnpm@10.33.2 --activate
|
|
WORKDIR /app
|
|
COPY package.json pnpm-lock.yaml ./
|
|
RUN pnpm install --frozen-lockfile --prod=false
|
|
|
|
# Stage 1b: Production dependency tree in a flat (hoisted) node_modules.
|
|
# Hoisted = symlink-free, so a Docker COPY into the runner is faithful
|
|
# (copying pnpm's default symlinked layout dereferences and breaks
|
|
# transitive resolution); complete = the custom socket.io server's deps
|
|
# (engine.io, accepts, ws, ...) all resolve at runtime.
|
|
FROM node:20-alpine AS prod-deps
|
|
RUN corepack enable && corepack prepare pnpm@10.33.2 --activate
|
|
WORKDIR /app
|
|
COPY package.json pnpm-lock.yaml ./
|
|
RUN echo "node-linker=hoisted" > .npmrc && pnpm install --frozen-lockfile --prod
|
|
|
|
# Stage 2: Build the application
|
|
FROM node:20-alpine AS builder
|
|
RUN corepack enable && corepack prepare pnpm@10.33.2 --activate
|
|
WORKDIR /app
|
|
COPY --from=deps /app/node_modules ./node_modules
|
|
COPY . .
|
|
# NODE_ENV=production in the builder makes `next build` and any code
|
|
# branching on isProd deterministic (build-auditor M9). Without this,
|
|
# CSP and other prod-only paths would compile under whatever NODE_ENV
|
|
# the host carried in.
|
|
ENV NODE_ENV=production
|
|
ENV NEXT_TELEMETRY_DISABLED=1
|
|
ENV SKIP_ENV_VALIDATION=1
|
|
RUN pnpm build
|
|
|
|
# Stage 3: Production runner
|
|
FROM node:20-alpine AS runner
|
|
RUN addgroup --system --gid 1001 nodejs && adduser --system --uid 1001 nextjs
|
|
WORKDIR /app
|
|
ENV NODE_ENV=production
|
|
ENV NEXT_TELEMETRY_DISABLED=1
|
|
COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
|
|
COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
|
|
COPY --from=builder --chown=nextjs:nodejs /app/public ./public
|
|
COPY --from=builder --chown=nextjs:nodejs /app/dist/server.js ./server-custom.js
|
|
# The Next standalone node_modules is a MATCHED SET with the turbopack
|
|
# server chunks — it resolves turbopack's externalized packages (better-auth,
|
|
# postgres, pino, minio, ...) by their hashed ids, so REPLACING it makes
|
|
# every route that uses them 500 with "Failed to load external module".
|
|
# But the custom server (server-custom.js, CJS via esbuild --packages=external)
|
|
# require()s deps the trace omits or ships ESM-only: socket.io's closure
|
|
# (accepts/ws/engine.io/cors) and drizzle-orm's CJS entry (index.cjs). So
|
|
# MERGE the complete hoisted prod tree INTO the standalone node_modules with
|
|
# rsync --ignore-existing: it ADDS the missing packages/files and SKIPS
|
|
# everything the trace already provides (and unlike COPY/cp it tolerates the
|
|
# trace's pnpm symlinks instead of erroring on symlink-vs-dir). The one
|
|
# thing the standalone server bootstrap would set — globalThis.AsyncLocalStorage
|
|
# — is handled up-front by src/server-runtime-preamble.ts.
|
|
COPY --from=prod-deps --chown=nextjs:nodejs /app/node_modules /opt/prod-node-modules
|
|
RUN apk add --no-cache --virtual .merge-deps rsync \
|
|
&& rsync -a --ignore-existing /opt/prod-node-modules/ ./node_modules/ \
|
|
&& rm -rf /opt/prod-node-modules \
|
|
&& apk del .merge-deps
|
|
# pg_dump for the backup/DR bundle engine (src/lib/services/backup.service.ts
|
|
# spawns `pg_dump`). Version pinned to match the postgres:16 server.
|
|
RUN apk add --no-cache postgresql16-client
|
|
USER nextjs
|
|
EXPOSE 3000
|
|
HEALTHCHECK --interval=30s --timeout=5s --start-period=20s --retries=3 \
|
|
CMD wget --no-verbose --tries=1 --spider http://localhost:${PORT:-3000}/api/health || exit 1
|
|
CMD ["node", "server-custom.js"]
|