atelier/Dockerfile at main · frak-id/atelier · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
# --------------------------------------------------------------------------
# Atelier — multi-stage, multi-target Docker build
#
# Produces TWO images from one Dockerfile:
#
#   manager    — Bun API server (ghcr.io/frak-id/atelier-manager)
#   dashboard  — nginx serving the React SPA + reverse-proxying to manager
#                (ghcr.io/frak-id/atelier-dashboard)
#
# Build:
#   docker build --target manager   -t atelier-manager   .
#   docker build --target dashboard -t atelier-dashboard  .
# --------------------------------------------------------------------------

# ── Stage 1: install dependencies ─────────────────────────────────────────
FROM oven/bun:1 AS deps

WORKDIR /build

# Copy workspace root files needed for dependency resolution
COPY package.json bun.lock ./
COPY packages/opencode-atelier/package.json packages/opencode-atelier/
COPY packages/shared/package.json packages/shared/
COPY apps/manager/package.json apps/manager/
COPY apps/dashboard/package.json apps/dashboard/

RUN bun install --frozen-lockfile

# ── Stage 2: build manager + dashboard ────────────────────────────────────
FROM oven/bun:1 AS builder

WORKDIR /build

# Copy installed node_modules from deps stage
COPY --from=deps /build/node_modules node_modules
COPY --from=deps /build/packages/shared/node_modules packages/shared/node_modules
COPY --from=deps /build/packages/opencode-atelier/node_modules packages/opencode-atelier/node_modules
COPY --from=deps /build/apps/manager/node_modules apps/manager/node_modules
COPY --from=deps /build/apps/dashboard/node_modules apps/dashboard/node_modules

# Copy source
COPY packages/shared packages/shared
COPY packages/opencode-atelier packages/opencode-atelier
COPY apps/manager apps/manager
COPY apps/dashboard apps/dashboard
COPY tsconfig.json ./

# Build manager → single-file bundle
RUN bun build apps/manager/src/index.ts \
      --target=bun \
      --outfile=dist/server.js \
      --minify

# Build dashboard → static files
RUN cd apps/dashboard && bun run build

# ── Target: manager ──────────────────────────────────────────────────────
FROM oven/bun:1-slim AS manager

# git is needed by PrebuildChecker (git ls-remote for staleness detection)
RUN apt-get update && apt-get install -y --no-install-recommends git ca-certificates \
    && rm -rf /var/lib/apt/lists/*

WORKDIR /app

# Manager bundle
COPY --from=builder /build/dist/server.js ./server.js

# Drizzle migrations
COPY apps/manager/drizzle ./drizzle

# Base image definitions (image.json + Dockerfile for dev-base, dev-cloud)
COPY infra/images ./images

# Runtime environment
ENV NODE_ENV=production \
    ATELIER_SERVER_MODE=production \
    DATA_DIR=/app/data \
    MIGRATIONS_DIR=/app/drizzle \
    ATELIER_IMAGES_DIR=/app/images

# Data directory for SQLite database
RUN mkdir -p /app/data

EXPOSE 4000

CMD ["bun", "server.js"]

# ── Target: dashboard (nginx sidecar) ────────────────────────────────────
FROM nginx:alpine AS dashboard

# Pod runs as UID 1000 (non-root). Pre-create writable dirs for nginx
# and redirect PID file to /tmp (K8s mounts /run as root-owned tmpfs).
RUN mkdir -p /var/cache/nginx /tmp && \
    chown -R 1000:1000 /var/cache/nginx && \
    sed -i 's|/run/nginx.pid|/tmp/nginx.pid|g' /etc/nginx/nginx.conf

RUN rm /etc/nginx/conf.d/default.conf

# Atelier nginx config (SPA serving + reverse proxy to manager)
COPY infra/nginx/nginx.conf /etc/nginx/conf.d/default.conf

# Dashboard static files
COPY --from=builder /build/apps/dashboard/dist /usr/share/nginx/html

EXPOSE 8080

CMD ["nginx", "-g", "daemon off;"]