5d7b8c82e8
- Disable Sentry Vite plugin telemetry (telemetry: false) - Pass SENTRY_RELEASE as build-arg (not secret) since it's just the git sha - Keep only SENTRY_AUTH_TOKEN as Docker secret The release version was showing as *** because Docker secrets get masked by GitHub Actions. Git sha is not sensitive — safe as a build arg. The sourcemap warning from react-router is a known upstream issue (ships without sourcemaps) and is harmless. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
37 lines
1.3 KiB
Docker
37 lines
1.3 KiB
Docker
FROM node:25-slim AS base
|
|
RUN npm install -g pnpm@10.6.5
|
|
WORKDIR /app
|
|
|
|
FROM base AS deps
|
|
COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
|
|
COPY apps/journal/package.json apps/journal/
|
|
COPY packages/types/package.json packages/types/
|
|
COPY packages/ui/package.json packages/ui/
|
|
COPY packages/map/package.json packages/map/
|
|
COPY packages/gpx/package.json packages/gpx/
|
|
COPY packages/i18n/package.json packages/i18n/
|
|
COPY packages/db/package.json packages/db/
|
|
RUN pnpm install --frozen-lockfile
|
|
|
|
FROM base AS build
|
|
ARG SENTRY_RELEASE
|
|
COPY --from=deps /app/ ./
|
|
COPY . .
|
|
RUN --mount=type=secret,id=SENTRY_AUTH_TOKEN \
|
|
SENTRY_AUTH_TOKEN="$(cat /run/secrets/SENTRY_AUTH_TOKEN 2>/dev/null)" \
|
|
SENTRY_RELEASE="$SENTRY_RELEASE" \
|
|
pnpm --filter @trails-cool/journal build
|
|
|
|
FROM base AS runtime
|
|
RUN addgroup --system app && adduser --system --ingroup app app
|
|
COPY --from=deps /app/node_modules ./node_modules
|
|
COPY --from=deps /app/apps/journal/node_modules ./apps/journal/node_modules
|
|
COPY --from=build /app/apps/journal/build ./apps/journal/build
|
|
COPY --from=build /app/apps/journal/package.json ./apps/journal/package.json
|
|
COPY --from=build /app/packages ./packages
|
|
|
|
WORKDIR /app/apps/journal
|
|
USER app
|
|
EXPOSE 3000
|
|
ENV PORT=3000
|
|
CMD ["npx", "react-router-serve", "./build/server/index.js"]
|