diff --git a/docker/Dockerfile b/docker/Dockerfile index 46337770..0e93bc68 100644 --- a/docker/Dockerfile +++ b/docker/Dockerfile @@ -11,7 +11,7 @@ RUN npm run build FROM node:18-alpine AS backend-builder WORKDIR /app COPY package*.json ./ -RUN npm ci --only=production --force && \ +RUN npm ci --force && \ npm cache clean --force COPY src/backend/ ./src/backend/ @@ -50,8 +50,11 @@ ENV DEBIAN_FRONTEND=noninteractive \ PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" # Create users first -RUN groupadd -r mongodb && useradd -r -g mongodb mongodb \ - && groupadd -r node && useradd -r -g node -m node +RUN groupadd -r mongodb && useradd -r -g mongodb mongodb && \ + groupadd -r node && useradd -r -g node -m node && \ + mkdir -p /data/db /var/log/mongodb /var/run/mongodb && \ + chown -R mongodb:mongodb /data/db /var/log/mongodb /var/run/mongodb && \ + chmod 755 /data/db /var/log/mongodb /var/run/mongodb # Install all dependencies in one layer RUN rm -f /var/lib/apt/lists/lock /var/cache/apt/archives/lock /var/lib/dpkg/lock* && \ @@ -60,6 +63,7 @@ RUN rm -f /var/lib/apt/lists/lock /var/cache/apt/archives/lock /var/lib/dpkg/loc apt-get install -y --no-install-recommends \ ca-certificates \ gnupg \ + gosu \ nginx-light \ wget && \ wget -qO - https://www.mongodb.org/static/pgp/server-4.4.asc | apt-key add - && \ @@ -71,26 +75,26 @@ RUN rm -f /var/lib/apt/lists/lock /var/cache/apt/archives/lock /var/lib/dpkg/loc mongodb-org-server=${MONGO_VERSION} \ mongodb-org-shell=${MONGO_VERSION} && \ apt-get clean && \ - rm -rf /var/lib/apt/lists/* /var/cache/apt/* /tmp/* && \ - mkdir -p /data/db /var/log/mongodb /var/run/mongodb && \ - chown -R mongodb:mongodb /data/db /var/log/mongodb /var/run/mongodb + rm -rf /var/lib/apt/lists/* /var/cache/apt/* /tmp/* # Setup nginx and frontend COPY docker/nginx.conf /etc/nginx/nginx.conf COPY --from=frontend-builder /app/dist /usr/share/nginx/html -RUN chown -R www-data:www-data /usr/share/nginx/html +RUN chown -R www-data:www-data /usr/share/nginx/html && \ + mkdir -p /var/log/nginx && \ + chown -R www-data:www-data /var/log/nginx # Setup backend WORKDIR /app COPY package*.json ./ -RUN npm ci --only=production --ignore-scripts --force && \ +RUN npm ci --only=production --force && \ npm cache clean --force && \ rm -rf /tmp/* COPY --from=bcrypt-builder /app/node_modules/bcrypt /app/node_modules/bcrypt COPY --from=backend-builder /app/src/backend ./src/backend RUN chown -R node:node /app -VOLUME ["/data/db"] +VOLUME ["/data/db", "/var/log/mongodb"] EXPOSE 8080 8081 8082 27017 COPY docker/entrypoint.sh /entrypoint.sh diff --git a/docker/entrypoint.sh b/docker/entrypoint.sh index 1a5b2c92..245a054d 100644 --- a/docker/entrypoint.sh +++ b/docker/entrypoint.sh @@ -1,10 +1,10 @@ #!/bin/bash set -e -# Create required directories +# Create required directories and set permissions mkdir -p /data/db /var/log/mongodb /var/run/mongodb chown -R mongodb:mongodb /data/db /var/log/mongodb /var/run/mongodb -chmod 755 /data/db +chmod 755 /data/db /var/log/mongodb /var/run/mongodb # Start MongoDB echo "Starting MongoDB..."