mirror of
https://github.com/AmruthPillai/Reactive-Resume.git
synced 2026-07-04 18:14:51 +10:00
Amruth Pillai
bdfb854602
* fix: resolve local data directory to /app/data in production Docker In the official Docker image, cwd is /app/apps/web (set via WORKDIR), but the data volume is mounted at /app/data. Without pnpm-workspace.yaml present in the runtime image, findWorkspaceRoot() returns null, so getLocalDataDirectory() fell back to <cwd>/data = /app/apps/web/data, which the node user has no permission to create. This caused the storage healthcheck to fail with EACCES. Add a production fallback: when cwd ends in apps/web, resolve the data directory to two levels up (matching /app/data in the official image). Re-resolves #2990. https://claude.ai/code/session_015pSTtukxf7mFTty2Y6PHZf * fix: replace apps/web heuristic with LOCAL_STORAGE_PATH env var The previous fix special-cased a cwd ending in apps/web to land on /app/data, but the heuristic could false-positive on any path with that suffix and was fragile to Dockerfile changes. pnpm-workspace.yaml is never copied into the runtime image, so the workspace-root walk was also dead code in production. Replace the heuristic with an explicit LOCAL_STORAGE_PATH env var: - Set LOCAL_STORAGE_PATH=/app/data in the Dockerfile (single source of truth). - Add LOCAL_STORAGE_PATH to the env schema; storage and statistics services pass it through to getLocalDataDirectory. - getLocalDataDirectory now uses the override when set, else workspace root (dev), else cwd/data. - New Nitro plugin validates the resolved local data directory at startup and refuses to boot with a clear error if it isn't writable, surfacing permission issues immediately instead of at first upload/healthcheck. - Document the new variable in .env.example and the Docker self-hosting docs. https://claude.ai/code/session_015pSTtukxf7mFTty2Y6PHZf * fix: address review feedback on storage path handling - apps/web/plugins/2.storage.ts: use the default-import style for node:fs/promises (matches the rest of the repo, sidesteps any named-export concerns for fs.constants). - packages/env/src/server.ts: reject relative LOCAL_STORAGE_PATH values via a zod refinement. Relative paths would be resolved against cwd, which differs between dev and Docker — exactly the same surprise the original bug had. Failing fast at config validation time gives a clear error before the server boots. https://claude.ai/code/session_015pSTtukxf7mFTty2Y6PHZf * fix: update data volume configuration in Docker Compose and enhance Nitro plugin * fix: remove "Can I customize the templates?" FAQ entry from multiple language files --------- Co-authored-by: Claude <noreply@anthropic.com>
73 lines
2.4 KiB
Docker
73 lines
2.4 KiB
Docker
# syntax=docker/dockerfile:1.7
|
|
|
|
ARG NODE_VERSION=24
|
|
|
|
FROM node:${NODE_VERSION}-slim AS base
|
|
|
|
WORKDIR /app
|
|
|
|
ENV COREPACK_ENABLE_DOWNLOAD_PROMPT=0 \
|
|
PNPM_HOME="/pnpm" \
|
|
PATH="/pnpm:$PATH" \
|
|
TURBO_TELEMETRY_DISABLED=1
|
|
|
|
RUN corepack enable
|
|
|
|
FROM base AS pruner
|
|
COPY . .
|
|
RUN --mount=type=cache,id=pnpm-store,target=/pnpm/store,sharing=locked \
|
|
pnpm dlx turbo@2.9.9 prune web --docker
|
|
|
|
FROM base AS builder
|
|
COPY --from=pruner /app/out/json/ ./
|
|
COPY --from=pruner /app/out/pnpm-lock.yaml ./pnpm-lock.yaml
|
|
RUN --mount=type=cache,id=pnpm-store,target=/pnpm/store,sharing=locked \
|
|
pnpm install --frozen-lockfile
|
|
|
|
COPY --from=pruner /app/out/full/ ./
|
|
RUN pnpm turbo run build --filter=web
|
|
|
|
FROM base AS runtime-pruner
|
|
COPY . .
|
|
RUN --mount=type=cache,id=pnpm-store,target=/pnpm/store,sharing=locked \
|
|
pnpm dlx turbo@2.9.9 prune @reactive-resume/runtime-externals --docker
|
|
|
|
FROM base AS runtime-deps
|
|
COPY --from=runtime-pruner /app/out/json/ ./
|
|
COPY --from=runtime-pruner /app/out/pnpm-lock.yaml ./pnpm-lock.yaml
|
|
RUN --mount=type=cache,id=pnpm-store,target=/pnpm/store,sharing=locked \
|
|
pnpm --filter=@reactive-resume/runtime-externals deploy --prod --legacy /runtime-deps
|
|
|
|
FROM node:${NODE_VERSION}-slim AS runtime
|
|
|
|
LABEL maintainer="amruthpillai"
|
|
LABEL org.opencontainers.image.licenses="MIT"
|
|
LABEL org.opencontainers.image.title="Reactive Resume"
|
|
LABEL org.opencontainers.image.description="A free and open-source resume builder."
|
|
LABEL org.opencontainers.image.vendor="Amruth Pillai"
|
|
LABEL org.opencontainers.image.url="https://rxresu.me"
|
|
LABEL org.opencontainers.image.documentation="https://docs.rxresu.me"
|
|
LABEL org.opencontainers.image.source="https://github.com/amruthpillai/reactive-resume"
|
|
|
|
ENV NODE_ENV="production" \
|
|
PORT=3000 \
|
|
LOCAL_STORAGE_PATH=/app/data
|
|
|
|
WORKDIR /app
|
|
|
|
RUN mkdir -p /app/apps/web /app/data && chown node:node /app/data
|
|
|
|
COPY --from=runtime-deps --chown=node:node /runtime-deps/node_modules ./node_modules
|
|
COPY --from=builder --chown=node:node /app/apps/web/.output ./apps/web/.output
|
|
COPY --from=pruner --chown=node:node /app/migrations ./migrations
|
|
|
|
WORKDIR /app/apps/web
|
|
|
|
USER node
|
|
|
|
EXPOSE 3000/tcp
|
|
HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=3 \
|
|
CMD ["node", "-e", "fetch('http://127.0.0.1:3000/api/health').then((r) => { if (!r.ok) process.exit(1); }).catch(() => process.exit(1));"]
|
|
|
|
CMD ["node", ".output/server/index.mjs"]
|