mirror of
https://github.com/fosrl/pangolin.git
synced 2026-10-13 07:19:38 +00:00
92 lines
3.0 KiB
Docker
92 lines
3.0 KiB
Docker
# FROM node:24.18.1-slim AS base
|
|
FROM public.ecr.aws/docker/library/node:24.18.1-slim AS base
|
|
|
|
WORKDIR /app
|
|
|
|
RUN apt-get update && apt-get install -y python3 make g++ && rm -rf /var/lib/apt/lists/*
|
|
|
|
COPY package*.json .npmrc ./
|
|
|
|
FROM base AS builder-dev
|
|
|
|
RUN npm ci
|
|
|
|
COPY . .
|
|
|
|
ARG BUILD=oss
|
|
ARG DATABASE=sqlite
|
|
|
|
RUN if [ "$BUILD" = "oss" ]; then rm -rf server/private; fi && \
|
|
npm run set:$DATABASE && \
|
|
npm run set:$BUILD && \
|
|
npm run db:generate && \
|
|
npm run build && \
|
|
npm run build:cli && \
|
|
test -f dist/server.mjs
|
|
|
|
# Instead of shipping the full production node_modules (most of which is UI-only
|
|
# code already compiled into .next), copy only the files the server bundles can
|
|
# load, merged with the node_modules Next.js traced for its standalone server.
|
|
# Pruning first keeps dev dependencies out of the trace.
|
|
RUN npm prune --omit=dev && \
|
|
node trace-deps.mjs -o .next/standalone dist/server.mjs dist/migrations.mjs dist/cli.mjs
|
|
|
|
# MaxMind databases are only shipped in saas builds
|
|
RUN mkdir -p maxmind && \
|
|
if [ "$BUILD" = "saas" ]; then \
|
|
touch GeoLite2-Country.mmdb GeoLite2-ASN.mmdb && \
|
|
mv GeoLite2-Country.mmdb GeoLite2-ASN.mmdb maxmind/; \
|
|
fi
|
|
|
|
# FROM node:24.18.1-slim AS runner
|
|
FROM public.ecr.aws/docker/library/node:24.18.1-slim AS runner
|
|
|
|
WORKDIR /app
|
|
|
|
RUN apt-get update && apt-get install -y curl tzdata && rm -rf /var/lib/apt/lists/*
|
|
|
|
COPY --from=builder-dev /app/.next/standalone ./
|
|
COPY --from=builder-dev /app/.next/static ./.next/static
|
|
COPY --from=builder-dev /app/dist ./dist
|
|
COPY --from=builder-dev /app/server/migrations ./dist/init
|
|
|
|
COPY ./cli/wrapper.sh /usr/local/bin/pangctl
|
|
RUN chmod +x /usr/local/bin/pangctl ./dist/cli.mjs
|
|
|
|
COPY server/db/names.json ./dist/names.json
|
|
COPY server/db/ios_models.json ./dist/ios_models.json
|
|
COPY server/db/mac_models.json ./dist/mac_models.json
|
|
COPY public ./public
|
|
|
|
# Copy MaxMind databases (empty directory for non-saas builds)
|
|
ARG BUILD=oss
|
|
|
|
COPY --from=builder-dev /app/maxmind ./maxmind
|
|
|
|
RUN if [ "$BUILD" != "saas" ]; then rmdir ./maxmind; fi
|
|
|
|
# OCI Image Labels - Build Args for dynamic values
|
|
ARG VERSION="dev"
|
|
ARG REVISION=""
|
|
ARG CREATED=""
|
|
ARG LICENSE="AGPL-3.0"
|
|
|
|
# Derive title and description based on BUILD type
|
|
ARG IMAGE_TITLE="Pangolin"
|
|
ARG IMAGE_DESCRIPTION="Identity-aware VPN and proxy for remote access to anything, anywhere"
|
|
|
|
# OCI Image Labels
|
|
# https://github.com/opencontainers/image-spec/blob/main/annotations.md
|
|
LABEL org.opencontainers.image.source="https://github.com/fosrl/pangolin" \
|
|
org.opencontainers.image.url="https://github.com/fosrl/pangolin" \
|
|
org.opencontainers.image.documentation="https://docs.pangolin.net" \
|
|
org.opencontainers.image.vendor="Fossorial" \
|
|
org.opencontainers.image.licenses="${LICENSE}" \
|
|
org.opencontainers.image.title="${IMAGE_TITLE}" \
|
|
org.opencontainers.image.description="${IMAGE_DESCRIPTION}" \
|
|
org.opencontainers.image.version="${VERSION}" \
|
|
org.opencontainers.image.revision="${REVISION}" \
|
|
org.opencontainers.image.created="${CREATED}"
|
|
|
|
CMD ["npm", "run", "start"]
|