feat: docker compose up -d starts DB + app (E00-S02-T01)

2026-08-28 23:35:05 +00:00
parent 2b293e2927
commit 3be575818d
4 changed files with 539 additions and 0 deletions
@@ -0,0 +1,48 @@
+# syntax=docker/dockerfile:1
+
+# @personal-blog/server — EPPP public server application image.
+#
+# [E00-S02-T01] baseline: builds the workspace server package with the pinned
+# toolchain (Node 24 + pnpm 11.23.0, frozen lockfile) and runs the compiled
+# entrypoint. The server is still a bootstrap placeholder (its module loads and
+# exits cleanly); the Fastify 5 application shell that turns it into a serving
+# process lands in a later story, and the health gate (T02), health endpoint
+# (T03), volume persistence (T04), non-root/read-only hardening and multi-arch
+# targets are later E00-S02 tasks — all out of scope here.
+
+# --- build stage: install the frozen workspace and compile the server --------
+FROM node:24-alpine AS build
+WORKDIR /app
+
+# Enable the pinned pnpm (11.23.0, via packageManager in the root package.json)
+# with Corepack, which ships with the Node image.
+RUN corepack enable
+
+# Copy only the manifests needed for resolution first, so source edits do not
+# invalidate the dependency layer, then install against the committed lockfile
+# (the same `--frozen-lockfile` path CI and developers use). Every workspace
+# package manifest is copied so the in-image workspace matches the lockfile
+# importers exactly (apps/server, packages/core, extensions/example).
+COPY package.json pnpm-lock.yaml pnpm-workspace.yaml tsconfig.base.json ./
+COPY apps/server/package.json apps/server/package.json
+COPY packages/core/package.json packages/core/package.json
+COPY extensions/example/package.json extensions/example/package.json
+RUN pnpm install --frozen-lockfile
+
+# Compile the server package (tsc -p apps/server/tsconfig.json -> dist/).
+COPY apps/server apps/server
+RUN pnpm --filter @personal-blog/server build
+
+# --- runtime stage: Node 24 + compiled output only ----------------------------
+FROM node:24-alpine AS runtime
+WORKDIR /app
+ENV NODE_ENV=production
+
+# The workspace install (devDependencies included — image-size pruning is a
+# later E00-S02 concern) plus the compiled server output and manifest.
+COPY --from=build /app/node_modules ./node_modules
+COPY --from=build /app/apps/server/dist ./apps/server/dist
+COPY --from=build /app/apps/server/package.json ./apps/server/package.json
+
+EXPOSE 3000
+CMD ["node", "apps/server/dist/index.js"]