Files
webapp/Dockerfile
Ruslan Bakiev 84e857ffc1
Some checks failed
Build Docker Image / build (push) Failing after 34s
Migrate from Infisical to Vault for secret loading
2026-03-09 14:30:10 +07:00

48 lines
1.2 KiB
Docker

FROM node:22-slim AS build
ENV PNPM_HOME=/pnpm
ENV PATH=$PNPM_HOME:$PATH
ENV NODE_OPTIONS=--max-old-space-size=2048
ENV NUXT_SOURCEMAP=false
ENV NUXT_MINIFY=false
ENV SENTRY_ENABLED=false
ENV NUXT_TELEMETRY_DISABLED=1
WORKDIR /app
RUN corepack enable
ARG VAULT_ADDR
ARG VAULT_TOKEN
ARG VAULT_SHARED_PATH
ARG VAULT_PROJECT_PATH
ENV VAULT_ADDR=$VAULT_ADDR \
VAULT_TOKEN=$VAULT_TOKEN \
VAULT_SHARED_PATH=$VAULT_SHARED_PATH \
VAULT_PROJECT_PATH=$VAULT_PROJECT_PATH
COPY package.json pnpm-lock.yaml ./
RUN pnpm install --frozen-lockfile
COPY . .
RUN node scripts/load-secrets.mjs && . ./.env.infisical && pnpm run build
FROM node:22-slim
WORKDIR /app
ENV NODE_ENV=production
ENV PORT=3000
ENV HOST=0.0.0.0
COPY --from=build /app/.output ./.output
COPY --from=build /app/public ./public
COPY --from=build /app/scripts ./scripts
COPY --from=build /app/node_modules ./node_modules
COPY --from=build /app/package.json ./package.json
EXPOSE 3000
CMD ["sh", "-c", "node scripts/load-secrets.mjs && . ./.env.infisical && if [ \"$SENTRY_ENABLED\" = \"false\" ] || [ ! -f ./.output/server/sentry.server.config.mjs ]; then node .output/server/index.mjs; else node --import ./.output/server/sentry.server.config.mjs .output/server/index.mjs; fi"]