bf5bf977e9
All checks were successful
Build & Deploy to K3s / build-and-deploy (push) Successful in 4m13s
Single Next.js 15 app now serves frontend SSR, admin CMS, and Stripe API. Replaces the Sanity quota-limited headless CMS with self-hosted Payload 3.0 on Postgres, removing the split-service topology (ssr/api/proxy → web). - nextjs/: Next.js 15 app with Payload 3.0, Postgres adapter, Stripe plugin - k8s/: new single-pod deployment + Postgres StatefulSet + PVCs (media, db) - .gitea/workflows/deploy.yml: single-image build, tears down legacy pods New Gitea secrets required: PAYLOAD_SECRET, POSTGRES_PASSWORD. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
64 lines
2.6 KiB
Docker
64 lines
2.6 KiB
Docker
# syntax=docker/dockerfile:1
|
|
|
|
# ─── Stage 1: install deps ────────────────────────────────────────────────────
|
|
FROM node:22-alpine AS deps
|
|
WORKDIR /app
|
|
RUN apk add --no-cache libc6-compat \
|
|
&& corepack enable \
|
|
&& corepack prepare pnpm@latest --activate
|
|
COPY package.json pnpm-lock.yaml ./
|
|
RUN pnpm install --frozen-lockfile
|
|
|
|
# ─── Stage 2: build ───────────────────────────────────────────────────────────
|
|
FROM node:22-alpine AS builder
|
|
WORKDIR /app
|
|
RUN apk add --no-cache libc6-compat \
|
|
&& corepack enable \
|
|
&& corepack prepare pnpm@latest --activate
|
|
COPY --from=deps /app/node_modules ./node_modules
|
|
COPY . .
|
|
|
|
# Build-time placeholders — real values injected at runtime.
|
|
# Payload reads env during `next build` (import map / type generation), so these
|
|
# must parse but never need to resolve.
|
|
ENV NEXT_TELEMETRY_DISABLED=1
|
|
ENV PAYLOAD_SECRET=build-time-placeholder
|
|
ENV DATABASE_URL=postgres://placeholder:placeholder@localhost:5432/placeholder
|
|
ENV STRIPE_SECRET_KEY=sk_test_placeholder
|
|
ENV NEXT_PUBLIC_SERVER_URL=https://rebours.studio
|
|
|
|
RUN pnpm build
|
|
|
|
# Trim dev deps to shrink the runtime image
|
|
RUN pnpm prune --prod
|
|
|
|
# ─── Stage 3: runtime ─────────────────────────────────────────────────────────
|
|
FROM node:22-alpine AS runtime
|
|
WORKDIR /app
|
|
RUN apk add --no-cache libc6-compat
|
|
|
|
ENV NODE_ENV=production
|
|
ENV NEXT_TELEMETRY_DISABLED=1
|
|
ENV HOSTNAME=0.0.0.0
|
|
ENV PORT=3000
|
|
|
|
# Non-root user for the runtime
|
|
RUN addgroup --system --gid 1001 nodejs \
|
|
&& adduser --system --uid 1001 nextjs
|
|
|
|
COPY --from=builder --chown=nextjs:nodejs /app/.next ./.next
|
|
COPY --from=builder --chown=nextjs:nodejs /app/public ./public
|
|
COPY --from=builder --chown=nextjs:nodejs /app/node_modules ./node_modules
|
|
COPY --from=builder --chown=nextjs:nodejs /app/package.json ./package.json
|
|
COPY --from=builder --chown=nextjs:nodejs /app/next.config.mjs ./next.config.mjs
|
|
COPY --from=builder --chown=nextjs:nodejs /app/src ./src
|
|
COPY --from=builder --chown=nextjs:nodejs /app/tsconfig.json ./tsconfig.json
|
|
|
|
# Media uploads live on a mounted volume in K8s; create the dir so Payload can write to it
|
|
RUN mkdir -p /app/media && chown -R nextjs:nodejs /app/media
|
|
|
|
USER nextjs
|
|
EXPOSE 3000
|
|
|
|
CMD ["node", "node_modules/next/dist/bin/next", "start"]
|