pew/Dockerfile at main · nocoo/pew · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
ARG NODE_VERSION=22
FROM node:${NODE_VERSION}-slim AS base

# Keep Bun for workspace installs/build scripts while pinning every Node.js
# execution in the build and runtime stages to the same supported major.
# Pin patch: floating oven/bun:1 broke frozen-lockfile across Bun minors.
COPY --from=oven/bun:1.4.0 /usr/local/bin/bun /usr/local/bin/bun

# --- Install dependencies ---
# Include all workspace package.json files so bun.lock stays consistent.
# Lifecycle scripts must run so platform-specific native addons (e.g. sharp's
# @img/sharp-linux-x64 binding) are properly installed.
FROM base AS deps
WORKDIR /app
COPY package.json bun.lock ./
COPY packages/core/package.json packages/core/
COPY packages/cli/package.json packages/cli/
COPY packages/web/package.json packages/web/
COPY packages/worker/package.json packages/worker/
COPY packages/worker-read/package.json packages/worker-read/
RUN bun install --frozen-lockfile

# --- Build ---
FROM base AS builder
WORKDIR /app

# Real Node.js is required for `next build` on linux/amd64. Bun's runtime
# resolver cannot load sharp's @img/sharp-linux-x64 native binding from inside
# Next.js's Turbopack page-data collection workers under bun's isolated install
# layout. The base image pins Node.js to the same supported major as the runner.
RUN node --version | grep -Eq '^v22\.'

# Railway injects service env vars as Docker build args.
# Next.js needs these at build time for page data collection.
ARG CF_ACCOUNT_ID
ARG CF_D1_DATABASE_ID
ARG CF_D1_API_TOKEN
ARG WORKER_INGEST_URL
ARG WORKER_SECRET
ARG AUTH_SECRET
ENV CF_ACCOUNT_ID=$CF_ACCOUNT_ID
ENV CF_D1_DATABASE_ID=$CF_D1_DATABASE_ID
ENV CF_D1_API_TOKEN=$CF_D1_API_TOKEN
ENV WORKER_INGEST_URL=$WORKER_INGEST_URL
ENV WORKER_SECRET=$WORKER_SECRET
ENV AUTH_SECRET=$AUTH_SECRET

COPY --from=deps /app ./
COPY . .
# Build @pew/core with bun (pure TS, no native deps).
# Build @pew/web with real Node.js — see comment above.
RUN bun run --filter @pew/core build \
  && cd packages/web \
  && node ./node_modules/.bin/next build \
  && cd /app \
  && bun run scripts/fix-standalone-swc-helpers.ts --required

# --- Production image ---
FROM node:${NODE_VERSION}-slim AS runner
WORKDIR /app
ENV NODE_ENV=production
ENV NEXT_TELEMETRY_DISABLED=1

COPY --from=builder /app/packages/web/.next/standalone ./
COPY --from=builder /app/packages/web/.next/static ./packages/web/.next/static
COPY --from=builder /app/packages/web/public ./packages/web/public

EXPOSE 7020
ENV PORT=7020
ENV HOSTNAME="0.0.0.0"

CMD ["node", "packages/web/server.js"]