Sessions 5-7a: 955 tests, deployment ready

web/Dockerfile

@@ -0,0 +1,64 @@
+# syntax=docker/dockerfile:1.6
+#
+# VYNDR Next.js frontend (port 3000).
+#
+# next.config.ts has `output: 'standalone'` set, so .next/standalone is a
+# self-contained runtime — no node_modules needed at runtime image.
+#
+# Three-stage build keeps the final image lean. The build runs with
+# `next build --webpack` (Serwist doesn't yet support Next 16 Turbopack
+# for production builds).
+#
+# Build:  docker build -f web/Dockerfile -t vyndr-web .
+# Run:    docker run -p 3000:3000 --env-file web/.env vyndr-web
+
+# --- deps stage ---
+FROM node:20-alpine AS deps
+WORKDIR /app
+COPY web/package.json web/package-lock.json ./
+RUN npm ci --no-audit --no-fund
+
+# --- build stage ---
+FROM node:20-alpine AS builder
+WORKDIR /app
+COPY --from=deps /app/node_modules ./node_modules
+COPY web/ ./
+# NEXT_PUBLIC_* must be present at build time — Next.js inlines them.
+# Coolify passes them via build args (mapped to env vars).
+ARG NEXT_PUBLIC_SUPABASE_URL
+ARG NEXT_PUBLIC_SUPABASE_ANON_KEY
+ARG NEXT_PUBLIC_SITE_URL
+ARG NEXT_PUBLIC_VAPID_PUBLIC_KEY
+ENV NEXT_PUBLIC_SUPABASE_URL=$NEXT_PUBLIC_SUPABASE_URL \
+    NEXT_PUBLIC_SUPABASE_ANON_KEY=$NEXT_PUBLIC_SUPABASE_ANON_KEY \
+    NEXT_PUBLIC_SITE_URL=$NEXT_PUBLIC_SITE_URL \
+    NEXT_PUBLIC_VAPID_PUBLIC_KEY=$NEXT_PUBLIC_VAPID_PUBLIC_KEY \
+    NODE_ENV=production
+RUN npm run build
+
+# --- runner stage ---
+FROM node:20-alpine AS runner
+WORKDIR /app
+
+RUN apk add --no-cache curl tini
+
+ENV NODE_ENV=production \
+    PORT=3000
+
+RUN addgroup -S vyndr && adduser -S vyndr -G vyndr
+
+# Standalone output bundles only what the server needs.
+COPY --from=builder --chown=vyndr:vyndr /app/.next/standalone ./
+COPY --from=builder --chown=vyndr:vyndr /app/.next/static ./.next/static
+COPY --from=builder --chown=vyndr:vyndr /app/public ./public
+
+USER vyndr
+
+EXPOSE 3000
+
+ENTRYPOINT ["/sbin/tini", "--"]
+
+HEALTHCHECK --interval=30s --timeout=10s --start-period=20s --retries=3 \
+  CMD curl -fsS http://127.0.0.1:3000 || exit 1
+
+CMD ["node", "server.js"]