Phase0

apps/web/Dockerfile

@@ -1,20 +1,31 @@
-FROM node:22-alpine AS builder
-WORKDIR /app
+# syntax=docker/dockerfile:1
+
+FROM node:22-alpine AS base
 RUN corepack enable && corepack prepare pnpm@9.15.0 --activate
-COPY package.json pnpm-workspace.yaml turbo.json ./
-COPY apps/web/package.json apps/web/
-RUN pnpm install --filter @hexahost/web...
+WORKDIR /app
+
+FROM base AS builder
+COPY package.json pnpm-lock.yaml pnpm-workspace.yaml turbo.json ./
+COPY packages packages
 COPY apps/web apps/web
+RUN pnpm install --frozen-lockfile
+ENV DOCKER_BUILD=1
 RUN pnpm --filter @hexahost/web build
 
-FROM node:22-alpine
+FROM node:22-alpine AS runner
 WORKDIR /app
 ENV NODE_ENV=production
-ENV WEB_PORT=3000
-COPY --from=builder /app/apps/web/dist ./dist
-COPY --from=builder /app/apps/web/public ./public
-COPY --from=builder /app/apps/web/package.json ./
+ENV PORT=3000
+ENV HOSTNAME=0.0.0.0
+
+RUN addgroup --system --gid 1001 nodejs && adduser --system --uid 1001 nextjs
+
+COPY --from=builder /app/apps/web/public ./apps/web/public
+COPY --from=builder --chown=nextjs:nodejs /app/apps/web/.next/standalone ./
+COPY --from=builder --chown=nextjs:nodejs /app/apps/web/.next/static ./apps/web/.next/static
+
+USER nextjs
 EXPOSE 3000
 HEALTHCHECK --interval=15s --timeout=5s --retries=3 \
-  CMD wget -qO- http://localhost:3000/api/health || exit 1
-CMD ["node", "dist/server.js"]
+  CMD wget -qO- http://localhost:3000/de || exit 1
+CMD ["node", "apps/web/server.js"]