hamedandClaude Opus 4.8
82700a60c1
- multi-stage (base/deps/builder/runner) per the official Next.js example - npm ci against the lockfile instead of npm i --force - NEXT_PUBLIC_* and DEV_MODE passed as build args (inlined at build time) - standalone output, smaller runtime image Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
81 lines
3.0 KiB
Docker
81 lines
3.0 KiB
Docker
# syntax=docker/dockerfile:1
|
|
# Multi-stage Dockerfile for Next.js 15 (App Router, output: 'standalone')
|
|
# Based on the official Next.js Docker example, tuned for Coolify.
|
|
# Reference: https://github.com/vercel/next.js/blob/canary/examples/with-docker/Dockerfile
|
|
|
|
# ----------------------------------------------------------------------------
|
|
# Base image
|
|
# ----------------------------------------------------------------------------
|
|
FROM node:22-alpine AS base
|
|
# libc6-compat is recommended by the Next.js image for some native deps (sharp, etc.)
|
|
RUN apk add --no-cache libc6-compat
|
|
WORKDIR /app
|
|
|
|
# ----------------------------------------------------------------------------
|
|
# 1. Dependencies — installed in a dedicated layer so they are cached as long
|
|
# as package.json / lockfile / .npmrc do not change.
|
|
# ----------------------------------------------------------------------------
|
|
FROM base AS deps
|
|
COPY package.json package-lock.json .npmrc ./
|
|
# Reproducible install honouring the lockfile (.npmrc provides legacy-peer-deps).
|
|
RUN npm ci
|
|
|
|
# ----------------------------------------------------------------------------
|
|
# 2. Builder — produces the standalone output.
|
|
# NEXT_PUBLIC_* values are inlined into the client bundle at BUILD time,
|
|
# so they must be passed as build args. DEV_MODE is read in app/layout.js
|
|
# to enable Google Analytics, so it must also be present at build time.
|
|
# ----------------------------------------------------------------------------
|
|
FROM base AS builder
|
|
WORKDIR /app
|
|
|
|
# Build-time arguments (Coolify: set these as Build Variables)
|
|
ARG NEXT_PUBLIC_API_URL
|
|
ARG NEXT_PUBLIC_CLIENT_ID
|
|
ARG NEXT_PUBLIC_CLIENT_SECRET
|
|
ARG DEV_MODE=FALSE
|
|
|
|
# Expose them to `next build`
|
|
ENV NEXT_PUBLIC_API_URL=$NEXT_PUBLIC_API_URL
|
|
ENV NEXT_PUBLIC_CLIENT_ID=$NEXT_PUBLIC_CLIENT_ID
|
|
ENV NEXT_PUBLIC_CLIENT_SECRET=$NEXT_PUBLIC_CLIENT_SECRET
|
|
ENV DEV_MODE=$DEV_MODE
|
|
ENV NEXT_TELEMETRY_DISABLED=1
|
|
ENV NODE_ENV=production
|
|
|
|
COPY --from=deps /app/node_modules ./node_modules
|
|
COPY . .
|
|
|
|
RUN npm run build
|
|
|
|
# ----------------------------------------------------------------------------
|
|
# 3. Runner — minimal production image running the standalone server.
|
|
# ----------------------------------------------------------------------------
|
|
FROM base AS runner
|
|
WORKDIR /app
|
|
|
|
ENV NODE_ENV=production
|
|
ENV NEXT_TELEMETRY_DISABLED=1
|
|
# The standalone server must bind to all interfaces inside the container.
|
|
ENV HOSTNAME=0.0.0.0
|
|
ENV PORT=3000
|
|
|
|
# Run as a non-root user for security.
|
|
RUN addgroup --system --gid 1001 nodejs \
|
|
&& adduser --system --uid 1001 nextjs
|
|
|
|
# Public assets (served by the standalone server).
|
|
COPY --from=builder /app/public ./public
|
|
|
|
# Standalone output already contains a minimal node_modules + server.js.
|
|
COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
|
|
# Static assets are NOT included in standalone and must be copied separately.
|
|
COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
|
|
|
|
USER nextjs
|
|
|
|
EXPOSE 3000
|
|
|
|
# server.js is generated by Next.js at the root of the standalone output.
|
|
CMD ["node", "server.js"]
|