Spaces:
Sleeping
Sleeping
| # ─── Base ───────────────────────────────────────────────────────────────────── | |
| FROM node:20-slim AS base | |
| ENV PNPM_HOME="/pnpm" | |
| ENV PATH="$PNPM_HOME:$PATH" | |
| RUN corepack enable && corepack prepare pnpm@latest-10 --activate | |
| # ─── Builder ────────────────────────────────────────────────────────────────── | |
| FROM base AS builder | |
| WORKDIR /app | |
| # Copy the full monorepo source (node_modules are excluded via .dockerignore) | |
| COPY . . | |
| # Install all workspace dependencies | |
| RUN pnpm install --frozen-lockfile | |
| # Build the React frontend | |
| # BASE_PATH=/ because in Docker there is no path prefix | |
| RUN BASE_PATH=/ PORT=7860 NODE_ENV=production \ | |
| pnpm --filter @workspace/app run build | |
| # Build the Express API server | |
| RUN pnpm --filter @workspace/api-server run build | |
| # Use pnpm deploy to produce a self-contained directory with real (non-symlinked) | |
| # node_modules — this is the canonical pnpm monorepo deployment pattern. | |
| # It resolves all workspace symlinks and prunes dev dependencies. | |
| RUN pnpm --filter @workspace/api-server deploy --prod --legacy /app/api-deploy | |
| # ─── Runner ─────────────────────────────────────────────────────────────────── | |
| FROM node:20-slim AS runner | |
| WORKDIR /app | |
| # API server compiled bundle (from the build step, not pnpm deploy's copy) | |
| COPY --from=builder /app/artifacts/api-server/dist ./dist | |
| # Self-contained node_modules from pnpm deploy (real files, no symlinks) | |
| COPY --from=builder /app/api-deploy/node_modules ./node_modules | |
| # package.json is read at startup by bare-server-node | |
| COPY --from=builder /app/api-deploy/package.json ./package.json | |
| # Vite-built frontend + UV/service-worker public files | |
| # Vite copies artifacts/app/public/** into the output during build | |
| COPY --from=builder /app/artifacts/app/dist/public ./public | |
| EXPOSE 7860 | |
| ENV PORT=7860 | |
| ENV NODE_ENV=production | |
| # PASSWORD must be set as a Space secret — the app will refuse auth without it | |
| # SESSION_SECRET is optional but recommended for production hardening | |
| CMD ["node", "--enable-source-maps", "./dist/index.mjs"] | |