Quintine
903c7731e2
Serve built Workers directly through pinned Miniflare with persistent D1-compatible storage and startup migrations. Build and verify Docker images in CI; publish main checkpoints to GHCR for manual TrueNAS updates on port 33046. Preserve explicit public-origin checks and LAN-compatible cryptographic operation IDs. Validation: 5,153 offline tests, typecheck, lint and build; 49 HTTP integration cases; HTTPS-origin create/join/chat/seat protection, foreign-origin rejection, exact saved-seat restart and browser asset serving. Independent persistence/proxy review completed. Clean Docker CI and actual NAS installation follow this source checkpoint.
29 lines
1.2 KiB
Docker
29 lines
1.2 KiB
Docker
FROM node:22-bookworm-slim AS build
|
|
WORKDIR /app
|
|
ENV CI=true WRANGLER_SEND_METRICS=false
|
|
RUN apt-get update && apt-get install -y --no-install-recommends git \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
COPY package.json package-lock.json ./
|
|
RUN npm ci
|
|
COPY . .
|
|
RUN npm run check && npm run build
|
|
|
|
FROM node:22-bookworm-slim AS runtime
|
|
WORKDIR /app
|
|
ENV NODE_ENV=production CI=true WRANGLER_SEND_METRICS=false \
|
|
WRANGLER_WRITE_LOGS=false MINIFLARE_REGISTRY_PATH=/tmp/dune-registry
|
|
LABEL org.opencontainers.image.source="https://github.com/Quintine/Dune"
|
|
COPY --from=build /app/node_modules ./node_modules
|
|
COPY --from=build /app/dist ./dist
|
|
COPY --from=build /app/drizzle ./drizzle
|
|
COPY package.json ./
|
|
COPY tools/wrangler.local.json ./tools/wrangler.local.json
|
|
COPY deploy/container-entrypoint.sh ./deploy/container-entrypoint.sh
|
|
COPY deploy/serve.mjs ./deploy/serve.mjs
|
|
RUN mkdir -p /data /app/.wrangler && chown node:node /data /app/.wrangler
|
|
USER node
|
|
EXPOSE 3000
|
|
HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=3 \
|
|
CMD node -e "fetch('http://127.0.0.1:3000/', {signal: AbortSignal.timeout(8000)}).then(r => process.exit(r.ok ? 0 : 1)).catch(() => process.exit(1))"
|
|
ENTRYPOINT ["sh", "/app/deploy/container-entrypoint.sh"]
|