Lorenzo SanesiandClaude Opus 5.5
b83ce039fb
Deploy stack su Proxmox / deploy (push) Failing after 3s
Monorepo npm con apps/public (Angular SSR), apps/private (Angular SPA), apps/api (Fastify), packages/shared e packages/styles; Medusa 2.21 in medusa/; infrastruttura Docker (Postgres PostGIS+pgvector, Redis, Caddy, backup) e workflow Gitea Actions per il deploy via SSH a ogni push su master. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_018jQyT6dR9czzGwqb7FkG6u
51 lines
2.2 KiB
Docker
51 lines
2.2 KiB
Docker
# syntax=docker/dockerfile:1
|
|
# API Fastify (apps/api). Contesto di build: radice del monorepo.
|
|
# docker build -f apps/api/Dockerfile -t iti-technology/api .
|
|
# All'avvio applica le migrazioni (idempotenti), poi avvia il server.
|
|
|
|
ARG NODE_IMAGE=node:24-bookworm-slim
|
|
|
|
# --- Dipendenze (tutte, per compilare) ---
|
|
FROM ${NODE_IMAGE} AS deps
|
|
WORKDIR /repo
|
|
# Tutti i manifest dei workspace: npm ci valida il lockfile sull'intero monorepo
|
|
COPY package.json package-lock.json tsconfig.base.json ./
|
|
COPY packages/shared/package.json packages/shared/
|
|
COPY apps/api/package.json apps/api/
|
|
COPY apps/public/package.json apps/public/
|
|
COPY apps/private/package.json apps/private/
|
|
# --ignore-scripts: i postinstall di root e delle app Angular servono solo in sviluppo
|
|
RUN npm ci --ignore-scripts --no-audit --no-fund -w @iti/api -w @iti/shared --include-workspace-root
|
|
|
|
# --- Build ---
|
|
FROM deps AS build
|
|
COPY packages/shared packages/shared
|
|
COPY apps/api apps/api
|
|
RUN npm run build -w @iti/shared && npx tsc -p apps/api/tsconfig.build.json
|
|
|
|
# --- Runtime: solo dipendenze di produzione + JS compilato ---
|
|
FROM ${NODE_IMAGE} AS runtime
|
|
ENV NODE_ENV=production
|
|
WORKDIR /repo
|
|
COPY package.json package-lock.json ./
|
|
COPY packages/shared/package.json packages/shared/
|
|
COPY apps/api/package.json apps/api/
|
|
COPY apps/public/package.json apps/public/
|
|
COPY apps/private/package.json apps/private/
|
|
RUN npm ci --omit=dev --ignore-scripts --no-audit --no-fund -w @iti/api -w @iti/shared \
|
|
&& npm cache clean --force \
|
|
# Volumi: uploads (condiviso con Caddy, che serve solo public/) e log su file
|
|
&& mkdir -p /data/uploads/public /data/uploads/private /var/log/iti \
|
|
&& chown -R node:node /data/uploads /var/log/iti
|
|
COPY --from=build /repo/packages/shared/dist packages/shared/dist
|
|
COPY --from=build /repo/apps/api/dist apps/api/dist
|
|
# Il migrator cerca le migrazioni in src/db/migrations rispetto alla root del package
|
|
COPY apps/api/src/db/migrations apps/api/src/db/migrations
|
|
|
|
USER node
|
|
WORKDIR /repo/apps/api
|
|
EXPOSE 3000
|
|
HEALTHCHECK --interval=15s --timeout=5s --start-period=30s --retries=5 \
|
|
CMD ["node", "-e", "fetch('http://127.0.0.1:3000/health').then(r=>process.exit(r.ok?0:1),()=>process.exit(1))"]
|
|
CMD ["sh", "-c", "node dist/db/migrate.js && exec node dist/server.js"]
|