128 lines
3.9 KiB
Docker
128 lines
3.9 KiB
Docker
# ============================================================
|
||
# Dockerfile — Full application (frontend + backend)
|
||
# ============================================================
|
||
# Multi-stage build:
|
||
# 1. chef – install cargo-chef for dependency caching
|
||
# 2. planner – generate recipe.json from the workspace
|
||
# 3. backend – build the backend binary (release)
|
||
# 4. frontend – build the frontend WASM bundle with Trunk
|
||
# 5. runtime – minimal image: backend binary + static frontend + nginx
|
||
# ============================================================
|
||
|
||
# --------------- Stage 1: Chef base ---------------
|
||
FROM rust:1-bookworm AS chef
|
||
RUN cargo install cargo-chef
|
||
WORKDIR /app
|
||
|
||
# --------------- Stage 2: Planner ---------------
|
||
FROM chef AS planner
|
||
COPY Cargo.toml Cargo.lock ./
|
||
COPY src/ src/
|
||
COPY backend/ backend/
|
||
COPY frontend/ frontend/
|
||
RUN cargo chef prepare --recipe-path recipe.json
|
||
|
||
# --------------- Stage 3: Backend builder ---------------
|
||
FROM chef AS backend-builder
|
||
|
||
COPY --from=planner /app/recipe.json recipe.json
|
||
RUN cargo chef cook --release --recipe-path recipe.json -p backend
|
||
|
||
COPY Cargo.toml Cargo.lock ./
|
||
COPY src/ src/
|
||
COPY backend/ backend/
|
||
COPY frontend/ frontend/
|
||
RUN cargo build --release -p backend
|
||
|
||
# --------------- Stage 4: Frontend builder ---------------
|
||
FROM chef AS frontend-builder
|
||
|
||
# Add the WASM target
|
||
RUN rustup target add wasm32-unknown-unknown
|
||
|
||
# Install Trunk (the WASM bundler used by the frontend) and sass (for SCSS)
|
||
RUN cargo install trunk
|
||
|
||
# Cache frontend dependencies
|
||
COPY --from=planner /app/recipe.json recipe.json
|
||
RUN cargo chef cook --release --target wasm32-unknown-unknown --recipe-path recipe.json -p frontend
|
||
|
||
# Copy full workspace source for the build
|
||
COPY Cargo.toml Cargo.lock ./
|
||
COPY src/ src/
|
||
COPY backend/ backend/
|
||
COPY frontend/ frontend/
|
||
|
||
# Build the frontend WASM bundle
|
||
# Trunk outputs to frontend/dist by default
|
||
WORKDIR /app/frontend
|
||
RUN trunk build --release
|
||
|
||
# --------------- Stage 5: Runtime ---------------
|
||
FROM debian:bookworm-slim AS runtime
|
||
|
||
# Install runtime dependencies:
|
||
# - ca-certificates & libssl3: TLS for PostgreSQL connections
|
||
# - nginx: serves the frontend static files and reverse-proxies /api to the backend
|
||
RUN apt-get update && \
|
||
apt-get install -y --no-install-recommends ca-certificates libssl3 nginx && \
|
||
rm -rf /var/lib/apt/lists/*
|
||
|
||
WORKDIR /app
|
||
|
||
# Copy the compiled backend binary
|
||
COPY --from=backend-builder /app/target/release/backend /app/backend
|
||
|
||
# Copy migrations
|
||
COPY backend/migrations/ /app/migrations/
|
||
|
||
# Copy the frontend static build output
|
||
COPY --from=frontend-builder /app/frontend/dist /var/www/html
|
||
|
||
# Nginx configuration: serve frontend + reverse-proxy /api to the backend
|
||
RUN cat > /etc/nginx/sites-available/default <<'EOF'
|
||
server {
|
||
listen 80;
|
||
server_name _;
|
||
|
||
root /var/www/html;
|
||
index index.html;
|
||
|
||
# Serve static frontend files, fall back to index.html for client-side routing
|
||
location / {
|
||
try_files $uri $uri/ /index.html;
|
||
}
|
||
|
||
# Reverse-proxy API requests to the Axum backend
|
||
location /api/ {
|
||
proxy_pass http://127.0.0.1:8001;
|
||
proxy_set_header Host $host;
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
proxy_set_header X-Forwarded-Proto $scheme;
|
||
}
|
||
}
|
||
EOF
|
||
|
||
# Startup script: launch backend in the background, then nginx in the foreground
|
||
RUN cat > /app/start.sh <<'SCRIPT'
|
||
#!/bin/bash
|
||
set -e
|
||
|
||
# Start the backend API server in the background
|
||
/app/backend &
|
||
|
||
# Start nginx in the foreground (keeps the container alive)
|
||
nginx -g 'daemon off;'
|
||
SCRIPT
|
||
RUN chmod +x /app/start.sh
|
||
|
||
EXPOSE 80
|
||
|
||
# Environment variables should be provided at runtime:
|
||
# DATABASE_URL – PostgreSQL connection string
|
||
# TOKEN_SECRET – JWT signing key
|
||
# ORIGIN – Allowed CORS origin (should be the public URL of this container)
|
||
|
||
CMD ["/app/start.sh"]
|