Piattaforma ITI TECHNOLOGY: monorepo, Medusa, API, sito, area riservata e deploy

Monorepo npm con apps/public (Angular SSR), apps/private (Angular SPA),
apps/api (Fastify), packages/shared e packages/styles; Medusa 2.21 in medusa/;
infrastruttura Docker (Postgres PostGIS+pgvector, Redis, Caddy, backup) e
workflow Gitea Actions per il deploy via SSH a ogni push su master.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_018jQyT6dR9czzGwqb7FkG6u

apps/public/Dockerfile

@@ -0,0 +1,34 @@
+# syntax=docker/dockerfile:1
+# Sito pubblico Angular SSR (apps/public). Contesto di build: radice del monorepo.
+#   docker build -f apps/public/Dockerfile -t iti-technology/public .
+# Il server SSR (dist/public/server/server.mjs) contiene già tutte le dipendenze: il runtime non ha node_modules.
+# La configurazione (dominio, URL dell'API, chiave Stripe…) arriva dalle variabili d'ambiente all'avvio.
+
+ARG NODE_IMAGE=node:24-bookworm-slim
+
+FROM ${NODE_IMAGE} AS deps
+WORKDIR /repo
+COPY package.json package-lock.json tsconfig.base.json ./
+COPY packages/shared/package.json packages/shared/
+COPY apps/api/package.json apps/api/
+COPY apps/public/package.json apps/public/
+COPY apps/private/package.json apps/private/
+RUN npm ci --ignore-scripts --no-audit --no-fund -w @iti/public -w @iti/shared --include-workspace-root
+
+FROM deps AS build
+COPY packages/shared packages/shared
+COPY packages/styles packages/styles
+COPY apps/public apps/public
+# prebuild: indice dei contenuti + asset di Leaflet
+RUN npm run build -w @iti/shared && npm run build -w @iti/public
+
+FROM ${NODE_IMAGE} AS runtime
+ENV NODE_ENV=production PORT=4000
+WORKDIR /app
+COPY --from=build /repo/apps/public/dist/public ./dist/public
+USER node
+EXPOSE 4000
+# /robots.txt è una route Express (prima del rendering Angular): non dipende dall'API né dall'host
+HEALTHCHECK --interval=15s --timeout=5s --start-period=20s --retries=5 \
+  CMD ["node", "-e", "fetch('http://127.0.0.1:4000/robots.txt').then(r=>process.exit(r.ok?0:1),()=>process.exit(1))"]
+CMD ["node", "dist/public/server/server.mjs"]