Feature: Build Multi-Stage API Production Image

[3m1n3nc3]

Description

Create a minimal non-root production container for API and worker processes.

File Location

learnault-api/Dockerfile, .dockerignore, entrypoints, and image docs

Design Reference

API Roadmap Phase 0: Build Multi-Stage API Production Image.

Dependencies

• Status: Blocked
• Blocked by: Feature: Add Complete Backend CI Quality Gates
• Blocks: Feature: Add Staging Deployment Rollback and Smoke Tests

Tasks

• Separate dependency, build, and runtime stages
• Generate Prisma Client and compile TypeScript during build
• Run as non-root
• Exclude secrets, tests, coverage, and build tooling from runtime
• Support API/worker entrypoints and health checks
• Scan dependencies and test startup/shutdown

Acceptance Criteria

• Image starts with runtime-only dependencies
• Container runs non-root and contains no env secrets
• No unresolved critical scan finding remains
• Health and shutdown tests pass

Verification Evidence

• Attach image size/digest, user inspection, scan, and smoke test

Difficulty

Advanced

[akinboyewaSamson]

Hello,

I’m a smart contract and full-stack developer interested in contributing to this issue.

I have experience contributing through OnlyDust and have participated in Drips Wave 4, Wave 5, Wave 6, as well as the GrantFox beta campaign.

My technical background includes Rust, Soroban, Cairo, Solidity, and TypeScript, with a focus on building secure, scalable, and maintainable blockchain applications.

Based on the scope of this issue, I’m confident I can deliver a complete and well-tested solution within 10hours of assignment. I prioritize clean code, clear documentation, and efficient implementation.

I’d appreciate the opportunity to contribute and help move this issue forward.

Thank you.

[NoobFaris]

I’d like to work on this. I’ve built Docker images for backend projects before, and I’ll make sure the implementation is clean, secure, and matches the spec before opening a PR

[Songu3020]

Hi! I’m a full-stack developer with a strong blockchain background. I’d love to handle this issue and can deliver a clean, reliable solution. Kindly assign it to me.

[OpadijoIdris]

I’m a backend dev and a devops, I can fix this issue. Please assign

[grantfox-oss]

🦊 GrantFox — @Songu3020 has been assigned to this issue as part of the Official Campaign | FWC26 campaign!

Next steps:

1. Open a Pull Request referencing this issue (e.g., Closes #73)
2. Your PR will be reviewed by the learnault maintainers

Good luck! Track your progress on GrantFox.