Initial Commit

docker/Dockerfile

@@ -0,0 +1,46 @@
+# syntax=docker/dockerfile:1
+
+# ── Stage 1: deps ─────────────────────────────────────────────────────────────
+FROM oven/bun:1 AS deps
+WORKDIR /app
+
+COPY frontend/package.json frontend/bun.lock* ./
+RUN bun install --frozen-lockfile
+
+# ── Stage 2: builder ──────────────────────────────────────────────────────────
+FROM oven/bun:1 AS builder
+WORKDIR /app
+
+COPY --from=deps /app/node_modules ./node_modules
+COPY frontend/ .
+
+ENV NEXT_TELEMETRY_DISABLED=1
+RUN bun run build
+
+# ── Stage 3: runner ───────────────────────────────────────────────────────────
+FROM oven/bun:1-slim AS runner
+WORKDIR /app
+
+ENV NODE_ENV=production
+ENV NEXT_TELEMETRY_DISABLED=1
+
+# Dedicated non-root user
+RUN addgroup --system --gid 1001 nodejs && \
+    adduser  --system --uid 1001 nextjs
+
+# Next.js standalone output
+COPY --from=builder /app/public           ./public
+COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
+COPY --from=builder --chown=nextjs:nodejs /app/.next/static     ./.next/static
+
+# Writable data directory for file uploads
+RUN mkdir -p /app/data/uploads && chown -R nextjs:nodejs /app/data
+
+USER nextjs
+
+EXPOSE 3000
+
+ENV PORT=3000
+ENV HOSTNAME=0.0.0.0
+
+CMD ["bun", "server.js"]