Dockerfile

FROM node:20-alpine AS deps
WORKDIR /app
COPY package.json package-lock.json* pnpm-lock.yaml* yarn.lock* ./
RUN   if [ -f package-lock.json ]; then npm ci;   elif [ -f pnpm-lock.yaml ]; then corepack enable && pnpm i --frozen-lockfile;   elif [ -f yarn.lock ]; then yarn --frozen-lockfile;   else npm i; fi

FROM node:20-alpine AS builder
WORKDIR /app
ARG APP_QB_URL
ENV APP_QB_URL=$APP_QB_URL
COPY --from=deps /app/node_modules ./node_modules
COPY . .
RUN npm run build

FROM node:20-alpine AS runner
WORKDIR /app
ENV NODE_ENV=production
ARG APP_QB_URL
ENV APP_QB_URL=$APP_QB_URL
# Add bash for debugging
RUN apk add --no-cache bash
RUN addgroup -S app && adduser -S app -G app
# Create secrets directory with proper ownership before switching to app user
RUN mkdir -p secrets && chown -R app:app secrets
USER app
COPY --from=builder /app/public ./public
COPY --from=builder /app/.next ./.next
COPY --from=builder /app/node_modules ./node_modules
COPY --from=builder /app/package.json ./package.json
EXPOSE 3000

# Healthcheck: ping the /api/health endpoint
HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
	CMD wget --no-verbose --tries=1 --spider http://localhost:3000/api/health || exit 1

CMD ["npm", "start"]