# ─── Stage 1: Build ─────────────────────────────────────────── FROM node:20-alpine AS builder WORKDIR /app # Install OpenSSL (required by Prisma) RUN apk add --no-cache openssl libc6-compat # Install dependencies COPY package.json package-lock.json* ./ RUN npm ci # Copy source COPY . . # Copy assets to public (for Next.js static serving) RUN mkdir -p public/assets && cp -r assets/. public/assets/ # Generate Prisma client & build RUN npx prisma generate RUN npm run build # ─── Stage 2: Runner ────────────────────────────────────────── FROM node:20-alpine AS runner WORKDIR /app RUN apk add --no-cache openssl libc6-compat ENV NODE_ENV=production ENV PORT=3000 ENV HOSTNAME="0.0.0.0" # Create non-root user RUN addgroup --system --gid 1001 nodejs && \ adduser --system --uid 1001 nextjs # Create data directory for SQLite RUN mkdir -p /data && chown nextjs:nodejs /data # Copy build artifacts COPY --from=builder /app/public ./public COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./ COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static # Copy Prisma files (needed to run migrations at startup) COPY --from=builder /app/prisma ./prisma COPY --from=builder /app/node_modules/.prisma ./node_modules/.prisma COPY --from=builder /app/node_modules/@prisma ./node_modules/@prisma COPY --from=builder /app/node_modules/prisma ./node_modules/prisma USER nextjs EXPOSE 3000 # Run DB migrations then start the app CMD ["sh", "-c", "node_modules/.bin/prisma db push --skip-generate && node server.js"]