watson/umami
1
0
Fork 0
mirror of https://github.com/umami-software/umami.git synced 2026-02-22 13:35:35 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

made it work

Browse source
This commit is contained in:
Kornel Javor 2023-09-23 14:30:40 +02:00
parent fd5d5c692e
commit 81e602ba71
4 changed files with 84 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

57
Dockerfile
View file

@ -1,20 +1,59 @@
# Install dependencies only when needed
FROM node:18-alpine AS deps
# Check https://github.com/nodejs/docker-node/tree/b4117f9333da4138b03a546ec926ef50a31506c3#nodealpine to understand why libc6-compat might be needed.
RUN apk add --no-cache libc6-compat
RUN apk add --no-cache --allow-untrusted --repository http://dl-cdn.alpinelinux.org/alpine/v3.18/main libc6-compat
RUN apk add --no-cache --allow-untrusted --repository http://dl-cdn.alpinelinux.org/alpine/v3.18/main openssl
COPY *.pem /usr/local/share/ca-certificates/
COPY *.crt /usr/local/share/ca-certificates/
RUN apk add --no-cache \
--allow-untrusted \
--repository http://dl-cdn.alpinelinux.org/alpine/v3.18/main ca-certificates && rm -rf /var/cache/apk/*
RUN update-ca-certificates
WORKDIR /app
COPY package.json yarn.lock ./
COPY .yarnrc ./
COPY *.crt /usr/local/share/ca-certificates/
# Add yarn timeout to handle slow CPU when Github Actions
RUN yarn config set network-timeout 300000
RUN yarn config set enableStrictSsl false
RUN npm set strict-ssl false
RUN npm set cafile /usr/local/share/ca-certificates/Z.crt
ENV NODE_TLS_REJECT_UNAUTHORIZED 0
ENV NODE_EXTRA_CA_CERTS /usr/local/share/ca-certificates/Z.crt
ENV DOCKER_CERT_PATH "/usr/local/share/ca-certificates/Z.crt"
ENV DOCKER_TLS_VERIFY 0
ENV PRISMA_BINARIES_MIRROR=http://binaries.prisma.sh
ENV PRISMA_ENGINES_MIRROR=http://binaries.prisma.sh
ENV NODE_OPTIONS=--use-openssl-ca
RUN npm config set strict-ssl false
RUN yarn config set "strict-ssl" false -g
RUN yarn install --frozen-lockfile
# Rebuild the source code only when needed
FROM node:18-alpine AS builder
WORKDIR /app
COPY --from=deps /app/node_modules ./node_modules
COPY --from=deps --chown=nextjs:nodejs /app/node_modules ./node_modules
COPY . .
COPY docker/middleware.js ./src
COPY *.crt /usr/local/share/ca-certificates/
COPY *.pem /usr/local/share/ca-certificates/
COPY *.crt /usr/local/share/ca-certificates/
RUN apk add --no-cache \
--allow-untrusted \
--repository http://dl-cdn.alpinelinux.org/alpine/v3.18/main ca-certificates && rm -rf /var/cache/apk/*
RUN update-ca-certificates
RUN yarn config set network-timeout 300000
RUN yarn config set enableStrictSsl false
RUN npm set strict-ssl false
RUN npm set cafile /usr/local/share/ca-certificates/Z.crt
ENV NODE_TLS_REJECT_UNAUTHORIZED 0
ENV NODE_EXTRA_CA_CERTS /usr/local/share/ca-certificates/Z.crt
ENV DOCKER_CERT_PATH "/usr/local/share/ca-certificates/Z.crt"
ENV DOCKER_TLS_VERIFY 0
ENV PRISMA_BINARIES_MIRROR=http://binaries.prisma.sh
ENV PRISMA_ENGINES_MIRROR=http://binaries.prisma.sh
ENV NODE_OPTIONS=--use-openssl-ca
ARG DATABASE_TYPE
ARG BASE_PATH
@ -27,6 +66,16 @@ RUN yarn build-docker
# Production image, copy all the files and run next
FROM node:18-alpine AS runner
COPY *.pem /usr/local/share/ca-certificates/
COPY *.crt /usr/local/share/ca-certificates/
RUN apk add --no-cache \
--allow-untrusted \
--repository http://dl-cdn.alpinelinux.org/alpine/v3.18/main ca-certificates && rm -rf /var/cache/apk/*
RUN apk add --no-cache \
--allow-untrusted \
--repository http://dl-cdn.alpinelinux.org/alpine/v3.18/main openssl
RUN update-ca-certificates
WORKDIR /app
ENV NODE_ENV production
@ -48,7 +97,7 @@ COPY --from=builder /app/scripts ./scripts
# https://nextjs.org/docs/advanced-features/output-file-tracing
COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
COPY --from=builder --chown=nextjs:nodejs /app/node_modules ./node_modules
USER nextjs
EXPOSE 3000