mirror of
https://github.com/sysadminsmedia/homebox.git
synced 2025-12-21 13:23:14 +01:00
74 lines
2.2 KiB
Docker
74 lines
2.2 KiB
Docker
# Node dependencies
|
|
FROM node:18-alpine AS frontend-dependencies
|
|
WORKDIR /app
|
|
RUN npm install -g pnpm
|
|
COPY frontend/package.json frontend/pnpm-lock.yaml ./
|
|
RUN pnpm install --frozen-lockfile --shamefully-hoist
|
|
|
|
# Build Nuxt
|
|
FROM node:18-alpine AS frontend-builder
|
|
WORKDIR /app
|
|
COPY frontend ./
|
|
COPY --from=frontend-dependencies /app/node_modules ./node_modules
|
|
RUN pnpm build
|
|
|
|
# Build Go dependencies
|
|
FROM golang:alpine AS builder-dependencies
|
|
WORKDIR /go/src/app
|
|
COPY ./backend/go.mod ./backend/go.sum ./
|
|
RUN go mod download
|
|
|
|
# Build API
|
|
FROM golang:alpine AS builder
|
|
ARG BUILD_TIME
|
|
ARG COMMIT
|
|
ARG VERSION
|
|
|
|
RUN apk update && apk upgrade && apk add --no-cache git build-base gcc g++
|
|
|
|
WORKDIR /go/src/app
|
|
COPY ./backend .
|
|
RUN rm -rf ./app/api/public
|
|
COPY --from=frontend-builder /app/.output/public ./app/api/static/public
|
|
COPY --from=builder-dependencies /go/pkg/mod /go/pkg/mod
|
|
|
|
# Use cache for Go build
|
|
RUN --mount=type=cache,target=/root/.cache/go-build \
|
|
CGO_ENABLED=0 GOOS=linux go build \
|
|
-ldflags "-s -w -X main.commit=$COMMIT -X main.buildTime=$BUILD_TIME -X main.version=$VERSION" \
|
|
-o /go/bin/api ./app/api/*.go
|
|
|
|
# Production stage with distroless
|
|
FROM gcr.io/distroless/static:latest
|
|
|
|
ENV HBOX_MODE=production
|
|
ENV HBOX_STORAGE_DATA=/data/
|
|
ENV HBOX_STORAGE_SQLITE_URL=/data/homebox.db?_fk=1
|
|
|
|
# Copy the binary and data directory, change ownership
|
|
COPY --from=builder --chown=nonroot /go/bin/api /app
|
|
COPY --from=builder --chown=nonroot /data /data
|
|
|
|
# Add wget to the image
|
|
# Note: If using distroless, this may not be applicable
|
|
# as distroless images do not include package managers.
|
|
# This line may be omitted if you're relying on another way to handle healthchecks.
|
|
COPY --from=alpine:latest /bin/wget /usr/bin/wget
|
|
|
|
LABEL Name=homebox Version=0.0.1
|
|
LABEL org.opencontainers.image.source="https://github.com/sysadminsmedia/homebox"
|
|
EXPOSE 7745
|
|
|
|
HEALTHCHECK --interval=30s \
|
|
--timeout=5s \
|
|
--start-period=5s \
|
|
--retries=3 \
|
|
CMD ["/usr/bin/wget", "--no-verbose", "--tries=1", "-O", "-", "http://localhost:7745/api/v1/status"]
|
|
|
|
VOLUME ["/data"]
|
|
|
|
# Drop root and run as a low-privileged user
|
|
USER nonroot
|
|
ENTRYPOINT ["/app"]
|
|
CMD ["/data/config.yml"]
|