284313f908
Some checks are pending
Bidi Control Character Guard / bidi-control-guard (push) Waiting to run
Circular Dependency Check / Check for new circular dependencies (push) Waiting to run
Citus Migration Smoke / Combined migrations on single-node Citus (push) Waiting to run
E2E Fresh Install Tests / fresh-install-e2e (push) Waiting to run
ext-v2 guardrails / Run ext-v2 guard and ESLint (push) Waiting to run
Integration Tests / Check for relevant changes (push) Waiting to run
Integration Tests / ${{ (github.event_name == 'schedule' || github.event.inputs.suite == 'full') && 'Full integration suite' || 'Tier-1 integration subset' }} (push) Blocked by required conditions
Mobile checks / Mobile lint + typecheck (push) Waiting to run
Mobile checks / Mobile unit tests (push) Waiting to run
Mobile checks / Mobile dependency audit (report) (push) Waiting to run
Mobile checks / Mobile reproducibility checks (push) Waiting to run
Secrets guard (env backups) / Ensure no tracked env backup files (push) Waiting to run
Temporal Readiness / fast-readiness (push) Waiting to run
Temporal Readiness / docker-parity (push) Waiting to run
TypeScript Type Check / Nx affected typecheck (push) Waiting to run
Unit Tests / Skipped-test budget (push) Waiting to run
Unit Tests / Nx affected unit tests (push) Waiting to run
Unit Tests / Server unit coverage (informational) (push) Waiting to run
Validate Tenant Management Schema / Check for relevant changes (push) Waiting to run
Validate Tenant Management Schema / Validate Tenant Management Schema (push) Blocked by required conditions
EE Workflows Build Guard / ee-workflows-build-guard (push) Waiting to run
Excluded: .git, node_modules, secrets/, compose.env, assemblyscript tgz Source: /opt/alga-psa on psa.joliet.tech
85 lines
2.7 KiB
Docker
85 lines
2.7 KiB
Docker
# Dockerfile for using pre-built artifacts
|
|
# Designed for Argo workflows and CI systems that build separately
|
|
# Expects .next, dist, and shared/dist to exist locally
|
|
|
|
# Pin to the production-known-good Node runtime. node:alpine floated to Node 26.2.0
|
|
# and broke bundled Vault provider initialization in the blue deployment.
|
|
FROM node:26.1.0-alpine
|
|
RUN apk add --no-cache \
|
|
bash \
|
|
postgresql-client \
|
|
redis \
|
|
graphicsmagick \
|
|
imagemagick \
|
|
ghostscript \
|
|
curl \
|
|
nano \
|
|
ffmpeg
|
|
|
|
WORKDIR /app
|
|
|
|
# Copy package files for dependency installation
|
|
COPY package.json package-lock.json ./
|
|
COPY server/package.json ./server/
|
|
COPY shared/package.json ./shared/
|
|
COPY ee/server/package.json ./ee/server/
|
|
COPY ee/packages/workflows/package.json ./ee/packages/workflows/
|
|
COPY services/workflow-worker/package.json ./services/workflow-worker/
|
|
|
|
# Install only production dependencies.
|
|
# npm@11 enforces peer dependency resolution more strictly; this image only
|
|
# needs runtime deps and should not fail on dev-only peer conflicts.
|
|
RUN npm install --omit=dev --legacy-peer-deps
|
|
|
|
# Copy base files
|
|
COPY tsconfig.base.json ./
|
|
COPY server/setup /app/server/setup
|
|
COPY .env.example /app/.env
|
|
COPY .env.example /app/server/.env
|
|
|
|
# Copy pre-built shared workspace (must exist locally)
|
|
COPY ./shared/dist/ ./shared/dist/
|
|
COPY ./shared/package.json ./shared/package.json
|
|
|
|
# Copy pre-built Next.js artifacts (must exist locally)
|
|
# server/dist is no longer required here; workflow-worker is built/deployed separately
|
|
COPY ./server/.next ./server/.next
|
|
|
|
# Copy runtime files
|
|
COPY ./server/public ./server/public
|
|
COPY ./server/next.config.mjs ./server/
|
|
COPY ./server/knexfile.cjs ./server/
|
|
COPY ./server/tsconfig.json ./server/
|
|
COPY ./server/index.ts ./server/
|
|
COPY ./server/migrations/ ./server/migrations/
|
|
COPY ./server/seeds/ ./server/seeds/
|
|
COPY ./server/src/ ./server/src/
|
|
COPY ./ee/packages/workflows/ ./ee/packages/workflows/
|
|
COPY ./scripts ./scripts
|
|
COPY ./shared/workflow/ ./shared/workflow/
|
|
|
|
# Copy core package.json for version info
|
|
COPY packages/core/package.json /app/packages/core/package.json
|
|
|
|
# Copy entrypoint
|
|
COPY server/entrypoint.sh /app/entrypoint.sh
|
|
RUN chmod +x /app/entrypoint.sh
|
|
|
|
# Create build timestamp for verification
|
|
RUN echo "BUILD_TIME=$(date)" > /app/build-info.txt && \
|
|
echo "BUILD_EPOCH=$(date +%s)" >> /app/build-info.txt
|
|
|
|
EXPOSE 3000
|
|
|
|
# Environment configuration
|
|
ENV NODE_ENV=production
|
|
|
|
# Secret provider configuration
|
|
# Default configuration for composite secret system
|
|
# Can be overridden in docker-compose or deployment environments
|
|
# See docs/DOCKER_SECRET_PROVIDER_CONFIG.md for details
|
|
ENV SECRET_READ_CHAIN="env,filesystem"
|
|
ENV SECRET_WRITE_PROVIDER="filesystem"
|
|
|
|
ENTRYPOINT ["/app/entrypoint.sh"]
|