duffyduck
0671565433
Bug: Im Container schlug Prisma + mariadb-Auth fehl. - Prisma-Engine `linux-musl` braucht libssl.so.1.1 → Alpine 3.19+ hat nur openssl 3 → "shared library libssl.so.1.1 not found" - mariadb-client unter Alpine warf "TLS/SSL error: SSL is required" Fix: alle Stages (Frontend-build, Backend-build, Runtime) auf node:20-slim (Debian-bookworm). glibc + openssl 3 ABI-kompatibel, Prisma generiert linux-debian-Engine korrekt. Plus: .dockerignore um data/, plesktest/, backup-Klone erweitert (Build-Context war u.a. wegen MariaDB-Files mit restricted Permissions nicht lesbar). Plus: docker-compose.yml: version: '3.8' für docker-compose v1 Kompatibilität. Live-verifiziert: docker-compose up -d --build → alle 3 Container healthy, Login funktioniert, alte DB-Daten (3 Kunden, 15 Verträge, 144 SecurityEvents) erhalten via Volume-zu-Bind-Mount-Migration. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
66 lines
2.6 KiB
Docker
66 lines
2.6 KiB
Docker
# Multi-Stage Build: Frontend bauen, dann Backend bauen, dann schlankes Runtime-Image
|
||
# ---------------------------------------------------------------------------------
|
||
|
||
# Alle Stages auf node:20-slim (Debian-basiert) – dann passt die Prisma-Query-
|
||
# Engine (glibc + openssl) zur Runtime.
|
||
|
||
# ============== STAGE 1: Frontend bauen ==============
|
||
FROM node:20-slim AS frontend-builder
|
||
WORKDIR /build/frontend
|
||
COPY frontend/package.json frontend/package-lock.json ./
|
||
RUN npm ci --no-audit --no-fund --prefer-offline
|
||
COPY frontend/ ./
|
||
RUN npm run build
|
||
# Output: /build/frontend/dist/
|
||
|
||
# ============== STAGE 2: Backend bauen (TS → JS) ==============
|
||
FROM node:20-slim AS backend-builder
|
||
WORKDIR /build/backend
|
||
RUN apt-get update && apt-get install -y --no-install-recommends openssl \
|
||
&& rm -rf /var/lib/apt/lists/*
|
||
COPY backend/package.json backend/package-lock.json ./
|
||
RUN npm ci --no-audit --no-fund --prefer-offline
|
||
COPY backend/prisma ./prisma
|
||
RUN npx prisma generate
|
||
COPY backend/tsconfig.json ./
|
||
COPY backend/src ./src
|
||
RUN npx tsc
|
||
# Output: /build/backend/dist/
|
||
|
||
# ============== STAGE 3: Runtime ==============
|
||
# Debian-slim statt Alpine: Prisma-Engines erwarten libssl 1.1, das in Alpine 3.19+
|
||
# nicht mehr verfügbar ist. Slim hat openssl 3 ABI-kompatibel + native binaries.
|
||
FROM node:20-slim
|
||
WORKDIR /app
|
||
|
||
# OpenSSL für Prisma-Query-Engine + wget für Healthcheck
|
||
RUN apt-get update && apt-get install -y --no-install-recommends openssl wget \
|
||
&& rm -rf /var/lib/apt/lists/*
|
||
|
||
# Nur Production-Dependencies + Prisma-Client
|
||
COPY backend/package.json backend/package-lock.json ./
|
||
RUN npm ci --omit=dev --no-audit --no-fund --prefer-offline && npm cache clean --force
|
||
|
||
# Build-Artefakte aus Stage 2
|
||
COPY --from=backend-builder /build/backend/dist ./dist
|
||
COPY --from=backend-builder /build/backend/node_modules/.prisma ./node_modules/.prisma
|
||
COPY --from=backend-builder /build/backend/node_modules/@prisma ./node_modules/@prisma
|
||
COPY backend/prisma ./prisma
|
||
|
||
# Frontend-Build ins public/-Verzeichnis (wird in production-Mode statisch ausgeliefert)
|
||
COPY --from=frontend-builder /build/frontend/dist ./public
|
||
|
||
# Daten-Verzeichnisse (werden via Bind-Mount überlagert; hier nur als Fallback)
|
||
RUN mkdir -p uploads factory-defaults prisma/backups
|
||
|
||
# Healthcheck
|
||
HEALTHCHECK --interval=30s --timeout=5s --start-period=20s --retries=3 \
|
||
CMD wget --quiet --tries=1 --spider "http://localhost:${PORT:-3001}/api/health" || exit 1
|
||
|
||
# Beim Start: prisma db push (idempotent), dann node
|
||
COPY backend/docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh
|
||
RUN chmod +x /usr/local/bin/docker-entrypoint.sh
|
||
|
||
ENTRYPOINT ["docker-entrypoint.sh"]
|
||
CMD ["node", "dist/index.js"]
|