Clean commit without large files

docker/Dockerfile

@@ -0,0 +1,78 @@
+# Stage 1: Install dependencies and build frontend
+FROM node:18-alpine AS deps
+WORKDIR /app
+
+RUN apk add --no-cache python3 make g++ 
+
+COPY package*.json ./
+
+RUN npm ci --force && \
+    npm cache clean --force
+
+# Stage 2: Build frontend
+FROM deps AS frontend-builder
+WORKDIR /app
+
+COPY . .
+
+RUN npm run build
+
+# Stage 3: Build backend TypeScript
+FROM deps AS backend-builder
+WORKDIR /app
+
+COPY . .
+
+RUN npm run build:backend
+
+# Stage 4: Production dependencies
+FROM node:18-alpine AS production-deps
+WORKDIR /app
+
+COPY package*.json ./
+
+RUN npm ci --only=production --ignore-scripts --force && \
+    npm cache clean --force
+
+# Stage 5: Build native modules
+FROM node:18-alpine AS native-builder
+WORKDIR /app
+
+RUN apk add --no-cache python3 make g++ 
+
+COPY package*.json ./
+
+RUN npm ci --only=production bcryptjs better-sqlite3 --force && \
+    npm cache clean --force
+
+# Stage 6: Final image
+FROM node:18-alpine
+ENV DATA_DIR=/app/data \
+    PORT=8080 \
+    NODE_ENV=production
+
+RUN apk add --no-cache nginx gettext su-exec && \
+    mkdir -p /app/data && \
+    chown -R node:node /app/data
+
+COPY docker/nginx.conf /etc/nginx/nginx.conf
+COPY --from=frontend-builder /app/dist /usr/share/nginx/html
+RUN chown -R nginx:nginx /usr/share/nginx/html
+
+WORKDIR /app
+
+COPY --from=production-deps /app/node_modules /app/node_modules
+COPY --from=native-builder /app/node_modules/bcryptjs /app/node_modules/bcryptjs
+COPY --from=native-builder /app/node_modules/better-sqlite3 /app/node_modules/better-sqlite3
+COPY --from=backend-builder /app/dist/backend ./dist/backend
+
+COPY package.json ./
+RUN chown -R node:node /app
+
+VOLUME ["/app/data"]
+
+EXPOSE ${PORT} 8081 8082 8083 8084
+
+COPY docker/entrypoint.sh /entrypoint.sh
+RUN chmod +x /entrypoint.sh
+CMD ["/entrypoint.sh"]

docker/docker-compose.yml

@@ -0,0 +1,15 @@
+services:
+  termix:
+    image: ghcr.io/lukegus/termix:latest
+    container_name: termix
+    restart: unless-stopped
+    ports:
+      - "8080:8080"
+    volumes:
+      - termix-data:/app/data
+    environment:
+      PORT: "8080"
+
+volumes:
+  termix-data:
+    driver: local 

docker/entrypoint.sh

@@ -0,0 +1,29 @@
+#!/bin/sh
+set -e
+
+export PORT=${PORT:-8080}
+echo "Configuring web UI to run on port: $PORT"
+
+envsubst '${PORT}' < /etc/nginx/nginx.conf > /etc/nginx/nginx.conf.tmp
+mv /etc/nginx/nginx.conf.tmp /etc/nginx/nginx.conf
+
+mkdir -p /app/data
+chown -R node:node /app/data
+chmod 755 /app/data
+
+echo "Starting nginx..."
+nginx
+
+echo "Starting backend services..."
+cd /app
+export NODE_ENV=production
+
+if command -v su-exec > /dev/null 2>&1; then
+  su-exec node node dist/backend/starter.js
+else
+  su -s /bin/sh node -c "node dist/backend/starter.js"
+fi
+
+echo "All services started"
+
+tail -f /dev/null

docker/nginx.conf

@@ -0,0 +1,84 @@
+events {
+    worker_connections 1024;
+}
+
+http {
+    include mime.types;
+    default_type application/octet-stream;
+
+    sendfile on;
+    keepalive_timeout 65;
+
+    server {
+        listen ${PORT};
+        server_name localhost;
+
+        location / {
+            root /usr/share/nginx/html;
+            index index.html index.htm;
+        }
+
+        location /users/ {
+            proxy_pass http://127.0.0.1:8081;
+            proxy_http_version 1.1;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+
+        location /ssh/db/ {
+            proxy_pass http://127.0.0.1:8081;
+            proxy_http_version 1.1;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+
+        location /ssh/websocket/ {
+            proxy_pass http://127.0.0.1:8082/;
+            proxy_http_version 1.1;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection "Upgrade";
+            proxy_set_header Host $host;
+            proxy_cache_bypass $http_upgrade;
+
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+
+        location /ssh/tunnel/ {
+            proxy_pass http://127.0.0.1:8083;
+            proxy_http_version 1.1;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+
+        location /ssh/config_editor/ {
+            proxy_pass http://127.0.0.1:8084;
+            proxy_http_version 1.1;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+
+        location ~ ^/ssh/config_editor/(recent|pinned|shortcuts) {
+            proxy_pass http://127.0.0.1:8081;
+            proxy_http_version 1.1;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+
+        error_page 500 502 503 504 /50x.html;
+        location = /50x.html {
+            root /usr/share/nginx/html;
+        }
+    }
+}