blob: 4be7100435eeec073a646840f4c83379240dfefa (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
|
# Planner stage - Compute dependencies and create recipe
FROM lukemathwalker/cargo-chef:latest-rust-1.75 AS planner
WORKDIR /app
# Copy the minimal files needed for dependency calculation
COPY Cargo.* ./
COPY src/ src/
RUN cargo chef prepare --recipe-path recipe.json
# Cache dependencies stage
FROM lukemathwalker/cargo-chef:latest-rust-1.75 AS cacher
WORKDIR /app
COPY --from=planner /app/recipe.json recipe.json
RUN cargo chef cook --release --recipe-path recipe.json
# Builder stage
FROM lukemathwalker/cargo-chef:latest-rust-1.75 AS builder
WORKDIR /app
# Copy the entire project context
COPY . .
# Copy cached dependencies
COPY --from=cacher /app/target target
COPY --from=cacher /usr/local/cargo /usr/local/cargo
# Set sqlx offline mode to enable building without database connection
ENV SQLX_OFFLINE=true
# Build the application
RUN cargo build --release
# Runtime stage
FROM debian:bookworm-slim AS runtime
# Install SSL certificates and sqlite3
RUN apt-get update && \
apt-get install -y ca-certificates sqlite3 && \
rm -rf /var/lib/apt/lists/*
WORKDIR /app
# Copy the compiled binary
COPY --from=builder /app/target/release/portfolio-website /app/portfolio-website
# Copy migrations folder for SQLX
COPY --from=builder /app/migrations /app/migrations
# Copy static directory
COPY --from=builder /app/static /app/static
# Create data directory and set up permissions
RUN mkdir -p /app/data && \
# Create a specific group and user for the application
groupadd -r appgroup && \
useradd -r -g appgroup appuser && \
# Give ownership to the new user
chown -R appuser:appgroup /app && \
# Set directory permissions
chmod -R 755 /app && \
chmod 777 /app/data && \
# Create an empty database file with proper permissions
touch /app/data/production.db && \
chmod 666 /app/data/production.db
# Create .env file with production settings
RUN echo "DATABASE_URL=sqlite:/app/data/production.db" > /app/.env && \
chown appuser:appgroup /app/.env
# Switch to application user
USER appuser
# Expose the port your application runs on
EXPOSE 3000
# Use JSON format for CMD to handle signals properly
CMD ["sh", "-c", "DATABASE_URL=sqlite:/app/data/production.db /app/portfolio-website"]
|
