josh
a89cc36489
Two bugs kept a fresh docker-compose deploy from ever accepting admin:admin:
1. resolveSqliteUrl in packages/db/src/client.ts stripped leading slashes
wholesale — so file:/data/vector.db became a relative path and was
resolved against packages/db/prisma/. Prisma CLI (migrate deploy)
correctly wrote to /data/vector.db on the mounted volume; the app's
runtime client connected to an empty file at packages/db/prisma/data/
vector.db with no tables, so login threw. The helper now passes Unix
absolute paths through verbatim, still normalizes file:/// triple-
slash URLs, and only resolves truly relative paths against the schema
dir.
2. The Dockerfile CMD ran migrations but not a seed, so even when the
path bug is fixed the User table is empty — admin:admin 401s forever.
Added packages/db/ensure-admin.mjs (pure JS, no tsx needed) that
creates the default admin user iff User.count() === 0, and wired it
into the API CMD between migrate deploy and node. Credentials can be
overridden with SEED_ADMIN_{USERNAME,PASSWORD,EMAIL}.
52 lines
2.0 KiB
Docker
52 lines
2.0 KiB
Docker
# syntax=docker/dockerfile:1.7
|
|
|
|
# ---------- build ----------
|
|
FROM node:22-alpine AS build
|
|
RUN apk add --no-cache openssl
|
|
RUN corepack enable && corepack prepare pnpm@10.33.0 --activate
|
|
WORKDIR /repo
|
|
|
|
# Manifests first for cache-friendly installs.
|
|
COPY pnpm-workspace.yaml pnpm-lock.yaml package.json ./
|
|
COPY apps/api/package.json ./apps/api/
|
|
COPY apps/web/package.json ./apps/web/
|
|
COPY apps/e2e/package.json ./apps/e2e/
|
|
COPY packages/db/package.json ./packages/db/
|
|
COPY packages/shared/package.json ./packages/shared/
|
|
COPY packages/ui/package.json ./packages/ui/
|
|
COPY packages/config/package.json ./packages/config/
|
|
RUN pnpm install --frozen-lockfile
|
|
|
|
COPY . .
|
|
|
|
RUN pnpm -C packages/db exec prisma generate \
|
|
&& pnpm -C packages/shared build \
|
|
&& pnpm -C packages/db build \
|
|
&& pnpm -C apps/api build
|
|
|
|
# Point workspace package.json "main/exports" at compiled JS so Node
|
|
# (ESM) resolves dist/ at runtime instead of the original .ts sources.
|
|
RUN for p in packages/db packages/shared; do \
|
|
node -e "const fs=require('fs');const j=JSON.parse(fs.readFileSync('$p/package.json'));j.main='./dist/index.js';j.types='./dist/index.d.ts';j.exports={'.':{types:'./dist/index.d.ts',default:'./dist/index.js'}};fs.writeFileSync('$p/package.json',JSON.stringify(j,null,2));" ; \
|
|
done
|
|
|
|
# ---------- runtime ----------
|
|
FROM node:22-alpine
|
|
RUN apk add --no-cache openssl wget
|
|
RUN corepack enable && corepack prepare pnpm@10.33.0 --activate
|
|
WORKDIR /app
|
|
|
|
COPY --from=build /repo /app
|
|
|
|
ENV NODE_ENV=production
|
|
ENV PORT=3001
|
|
EXPOSE 3001
|
|
|
|
HEALTHCHECK --interval=30s --timeout=5s --start-period=20s --retries=3 \
|
|
CMD wget -qO- http://localhost:3001/healthz || exit 1
|
|
|
|
WORKDIR /app/apps/api
|
|
# Apply migrations → seed default admin on empty DB → start API.
|
|
# Override the default admin credentials via SEED_ADMIN_{USERNAME,PASSWORD,EMAIL}.
|
|
CMD ["sh", "-c", "pnpm -C ../../packages/db exec prisma migrate deploy && node ../../packages/db/ensure-admin.mjs && node dist/index.js"]
|