Multi-stage build: node builds the SPA, dotnet publishes the API, the runtime image serves the SPA from wwwroot/ and exposes /health. Frontend Supabase URL + publishable key are baked in at build time; DB conn string and Supabase JWKS metadata come from Coolify env vars. VITE_API_URL empty means same-origin, so the browser hits /api/todos on the same host that serves the SPA.
44 lines
1.3 KiB
Docker
44 lines
1.3 KiB
Docker
# syntax=docker/dockerfile:1.7
|
|
|
|
# 1. Frontend build
|
|
FROM node:20-alpine AS web
|
|
WORKDIR /src
|
|
COPY frontend/package.json frontend/package-lock.json ./
|
|
RUN npm ci --no-audit --no-fund
|
|
COPY frontend/ ./
|
|
|
|
# Public values baked into the client bundle at build time.
|
|
# API URL is empty in production (same-origin — the backend serves the SPA).
|
|
ARG VITE_SUPABASE_URL
|
|
ARG VITE_SUPABASE_PUBLISHABLE_KEY
|
|
ARG VITE_API_URL=""
|
|
ENV VITE_SUPABASE_URL=$VITE_SUPABASE_URL \
|
|
VITE_SUPABASE_PUBLISHABLE_KEY=$VITE_SUPABASE_PUBLISHABLE_KEY \
|
|
VITE_API_URL=$VITE_API_URL
|
|
|
|
RUN npm run build
|
|
|
|
# 2. Backend publish
|
|
FROM mcr.microsoft.com/dotnet/sdk:9.0 AS api
|
|
WORKDIR /src
|
|
COPY backend/backend.csproj backend/
|
|
RUN dotnet restore backend/backend.csproj
|
|
COPY backend/ backend/
|
|
RUN dotnet publish backend/backend.csproj \
|
|
-c Release -o /out --no-restore /p:UseAppHost=false
|
|
|
|
# 3. Runtime
|
|
FROM mcr.microsoft.com/dotnet/aspnet:9.0 AS runtime
|
|
WORKDIR /app
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends curl \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
COPY --from=api /out ./
|
|
COPY --from=web /src/dist ./wwwroot
|
|
ENV ASPNETCORE_ENVIRONMENT=Production \
|
|
ASPNETCORE_URLS=http://+:8080
|
|
EXPOSE 8080
|
|
HEALTHCHECK --interval=30s --timeout=5s --start-period=20s --retries=3 \
|
|
CMD curl -fsS http://127.0.0.1:8080/health || exit 1
|
|
ENTRYPOINT ["dotnet", "backend.dll"]
|