mirror of
https://github.com/Termix-SSH/Termix.git
synced 2026-08-25 15:36:58 +00:00
dependabot[bot]anddependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
488e3f014b
Bumps the docker-major-updates group in /docker with 1 update: node. Updates `node` from 24-slim to 26-slim --- updated-dependencies: - dependency-name: node dependency-version: 26-slim dependency-type: direct:production dependency-group: docker-major-updates ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
121 lines
4.1 KiB
Docker
121 lines
4.1 KiB
Docker
# Stage 1: Install dependencies
|
|
FROM node:26-slim AS deps
|
|
WORKDIR /app
|
|
|
|
RUN apt-get update && apt-get install -y python3 make g++ && rm -rf /var/lib/apt/lists/*
|
|
|
|
COPY package*.json ./
|
|
COPY .npmrc ./
|
|
COPY vendor ./vendor
|
|
|
|
COPY scripts/patch-guacamole-lite.cjs ./scripts/
|
|
|
|
RUN npm ci --ignore-scripts && \
|
|
node scripts/patch-guacamole-lite.cjs && \
|
|
npm cache clean --force
|
|
|
|
# Stage 2: Build frontend
|
|
FROM deps AS frontend-builder
|
|
WORKDIR /app
|
|
|
|
COPY . .
|
|
|
|
RUN find public/fonts -name "*.ttf" ! -name "*Regular.ttf" ! -name "*Bold.ttf" ! -name "*Italic.ttf" -delete
|
|
|
|
RUN npm cache clean --force && \
|
|
NODE_OPTIONS="--max-old-space-size=3072" npm run build
|
|
|
|
# Stage 3: Build backend
|
|
FROM deps AS backend-builder
|
|
WORKDIR /app
|
|
|
|
COPY . .
|
|
|
|
RUN rm -rf node_modules/better-sqlite3/prebuilds && \
|
|
npm run build-release --prefix node_modules/better-sqlite3 && \
|
|
test -f node_modules/better-sqlite3/build/Release/better_sqlite3.node
|
|
|
|
RUN npm run build:backend
|
|
|
|
# Stage 4: Download OPKSSH binary for the target platform so the image works offline
|
|
FROM node:26-slim AS opkssh-downloader
|
|
ARG TARGETARCH
|
|
ARG OPKSSH_VERSION=v0.16.0
|
|
ARG OPKSSH_SHA256_AMD64=c018c3e7baf98612b923e742dd87be38650bf61e3b755fb2bc90de177568b1bf
|
|
ARG OPKSSH_SHA256_ARM64=9dd10c2b6ce99cde18e52c054877ca014134b291fd82afe71741c68db4f83d44
|
|
WORKDIR /opkssh
|
|
|
|
RUN apt-get update && apt-get install -y curl ca-certificates && rm -rf /var/lib/apt/lists/*
|
|
|
|
RUN case "$TARGETARCH" in \
|
|
amd64) OPKSSH_ARCH=amd64; OPKSSH_SHA256="$OPKSSH_SHA256_AMD64" ;; \
|
|
arm64) OPKSSH_ARCH=arm64; OPKSSH_SHA256="$OPKSSH_SHA256_ARM64" ;; \
|
|
*) echo "Unsupported architecture: $TARGETARCH" && exit 1 ;; \
|
|
esac && \
|
|
curl -fSL -o "opkssh-linux-${OPKSSH_ARCH}" \
|
|
"https://github.com/openpubkey/opkssh/releases/download/${OPKSSH_VERSION}/opkssh-linux-${OPKSSH_ARCH}" && \
|
|
echo "$OPKSSH_SHA256 opkssh-linux-${OPKSSH_ARCH}" | sha256sum -c - && \
|
|
chmod 755 "opkssh-linux-${OPKSSH_ARCH}" && \
|
|
echo -n "$OPKSSH_VERSION" > version.txt
|
|
|
|
# Stage 5: Production dependencies only
|
|
FROM node:26-slim AS production-deps
|
|
WORKDIR /app
|
|
|
|
RUN apt-get update && apt-get install -y python3 make g++ && rm -rf /var/lib/apt/lists/*
|
|
|
|
COPY package*.json ./
|
|
COPY .npmrc ./
|
|
COPY vendor ./vendor
|
|
|
|
COPY scripts/patch-guacamole-lite.cjs ./scripts/
|
|
|
|
RUN npm ci --omit=dev --ignore-scripts && \
|
|
node scripts/patch-guacamole-lite.cjs && \
|
|
rm -rf node_modules/better-sqlite3/prebuilds && \
|
|
npm run build-release --prefix node_modules/better-sqlite3 && \
|
|
test -f node_modules/better-sqlite3/build/Release/better_sqlite3.node && \
|
|
npm rebuild bcryptjs ssh2 && \
|
|
npm cache clean --force
|
|
|
|
# Stage 6: Final optimized image
|
|
FROM node:26-slim
|
|
WORKDIR /app
|
|
|
|
ENV DATA_DIR=/app/data \
|
|
PORT=8080 \
|
|
NODE_ENV=production \
|
|
POSTHOG_API_KEY=phc_xM8UznirsFxUkGE68gH4jzeqevf4kh76wGw7Ci7hH2dd
|
|
|
|
RUN apt-get update && apt-get install -y nginx gettext-base openssl ca-certificates gosu wget certbot python3-certbot-dns-cloudflare && \
|
|
update-ca-certificates && \
|
|
rm -rf /var/lib/apt/lists/* && \
|
|
mkdir -p /app/data /app/uploads /app/data/.opk /app/nginx /tmp/nginx && \
|
|
chown -R node:node /app /tmp/nginx && \
|
|
chmod 755 /app/data /app/uploads /app/data/.opk /app/nginx /tmp/nginx
|
|
|
|
COPY docker/nginx.conf /app/nginx/nginx.conf.template
|
|
COPY docker/nginx-https.conf /app/nginx/nginx-https.conf.template
|
|
|
|
COPY --chown=node:node --from=frontend-builder /app/dist /app/html
|
|
|
|
COPY --chown=node:node --from=production-deps /app/node_modules /app/node_modules
|
|
COPY --chown=node:node --from=backend-builder /app/dist/backend ./dist/backend
|
|
COPY --chown=node:node --from=opkssh-downloader /opkssh /app/opkssh-bundled
|
|
COPY --chown=node:node package.json ./
|
|
# Schema for Postgres and MySQL. Unused by the default SQLite deployment, which
|
|
# builds its tables at startup instead.
|
|
COPY --chown=node:node drizzle ./drizzle
|
|
|
|
VOLUME ["/app/data"]
|
|
|
|
EXPOSE ${PORT}
|
|
|
|
HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=3 \
|
|
CMD wget -q -O /dev/null http://localhost:30001/health || exit 1
|
|
|
|
COPY docker/entrypoint.sh /entrypoint.sh
|
|
RUN chmod +x /entrypoint.sh
|
|
|
|
CMD ["/entrypoint.sh"]
|