barazo-api/Dockerfile at main · singi-labs/barazo-api · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
# Multi-stage build for barazo-api
# Build context: monorepo root (docker build -f barazo-api/Dockerfile .)

# ---------------------------------------------------------------------------
# Stage 1: Install dependencies
# ---------------------------------------------------------------------------
FROM node:24-alpine AS deps
RUN apk add --no-cache libc6-compat
WORKDIR /workspace

# Enable pnpm via corepack
RUN corepack enable && corepack prepare pnpm@10.29.2 --activate

# Copy workspace root config (including .npmrc for inject-workspace-packages)
COPY package.json pnpm-lock.yaml pnpm-workspace.yaml .npmrc ./

# Copy all workspace package.json files (needed for pnpm install)
COPY barazo-lexicons/package.json ./barazo-lexicons/
COPY barazo-api/package.json ./barazo-api/
COPY barazo-web/package.json ./barazo-web/
COPY barazo-plugins/packages/plugin-signatures/package.json ./barazo-plugins/packages/plugin-signatures/

# Install all dependencies (including devDeps for tsc build)
RUN pnpm install --frozen-lockfile

# ---------------------------------------------------------------------------
# Stage 2: Build
# ---------------------------------------------------------------------------
FROM node:24-alpine AS builder
WORKDIR /workspace

RUN corepack enable && corepack prepare pnpm@10.29.2 --activate

# Copy installed dependencies
COPY --from=deps /workspace/ ./

# Copy lexicons source (workspace dependency)
COPY barazo-lexicons/ ./barazo-lexicons/

# Copy plugin-signatures source (workspace dependency via link:)
# Include tsconfig.base.json so the plugin's "extends": "../../tsconfig.base.json" resolves
COPY barazo-plugins/tsconfig.base.json ./barazo-plugins/
COPY barazo-plugins/packages/plugin-signatures/ ./barazo-plugins/packages/plugin-signatures/

# Copy API source
COPY barazo-api/ ./barazo-api/

# Build workspace dependencies first, then API
RUN pnpm --filter @singi-labs/barazo-lexicons build && \
    pnpm --filter @barazo/plugin-signatures run build:backend && \
    pnpm --filter barazo-api build

# Create standalone production deployment with resolved dependencies.
# pnpm deploy copies workspace + prod deps (requires inject-workspace-packages=true in .npmrc).
RUN pnpm --filter barazo-api deploy /app/deploy --prod

# pnpm deploy creates symlinks for workspace packages that point back to
# /workspace/, which won't exist in the runner stage. Fix each:
# - lexicons: use pnpm deploy to get package + resolved dependencies
# - plugin-signatures: only has peerDeps (satisfied by API), copy source directly
RUN pnpm --filter @singi-labs/barazo-lexicons deploy /tmp/lexicons-deploy --prod

RUN rm -rf /app/deploy/node_modules/@singi-labs/barazo-lexicons \
    && cp -r /tmp/lexicons-deploy /app/deploy/node_modules/@singi-labs/barazo-lexicons \
    && rm -rf /app/deploy/node_modules/@barazo/plugin-signatures \
    && cp -r /workspace/barazo-plugins/packages/plugin-signatures /app/deploy/node_modules/@barazo/plugin-signatures

# ---------------------------------------------------------------------------
# Stage 3: Production runner
# ---------------------------------------------------------------------------
FROM node:24-alpine AS runner
WORKDIR /app

ENV NODE_ENV=production

# Create non-root user
RUN addgroup --system --gid 1001 nodejs && \
    adduser --system --uid 1001 barazo

# Copy production deployment (node_modules + package.json)
COPY --from=builder /app/deploy/ ./

# Copy compiled output
COPY --from=builder /workspace/barazo-api/dist/ ./dist/

# Copy Drizzle migration files (applied on startup)
COPY --from=builder /workspace/barazo-api/drizzle/ ./drizzle/

# Create plugins directory for runtime plugin loading
RUN mkdir -p /app/plugins && chown barazo:nodejs /app/plugins

USER barazo

EXPOSE 3000

HEALTHCHECK --interval=30s --timeout=10s --start-period=30s --retries=3 \
  CMD wget -qO- http://127.0.0.1:3000/api/health || exit 1

CMD ["node", "dist/server.js"]