22619ebd11
All checks were successful
Docker / build-and-push (push) Successful in 3m33s
Client-side libsodium encryption with the key in the URL fragment, an Express/SQLite server holding ciphertext until a confirm-token round trip proves successful decrypt (avoiding the delete-on-first-byte race), TTL sweep for unclaimed drops, and a password-gated upload UI styled to match flit. Dockerized to match the project family's conventions, with a named volume so the DB/blobs survive redeploys, and a Gitea Actions workflow to build and push the image.
58 lines
2.0 KiB
Docker
58 lines
2.0 KiB
Docker
# ── Stage 1: build the Vite client ───────────────────────────────────────────
|
|
FROM node:24-slim AS client-build
|
|
|
|
WORKDIR /app
|
|
|
|
COPY client/package*.json client/
|
|
RUN npm install --prefix client
|
|
|
|
COPY client/ client/
|
|
RUN npm run build --prefix client
|
|
|
|
# ── Stage 2: compile the TypeScript server ────────────────────────────────────
|
|
FROM node:24-slim AS server-build
|
|
|
|
# better-sqlite3 has a native addon with no prebuilt binary for this
|
|
# platform/Node combo yet — build it from source.
|
|
RUN apt-get update -q && apt-get install -y --no-install-recommends python3 make g++ \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
WORKDIR /app
|
|
|
|
COPY server/package*.json server/
|
|
COPY server/tsconfig.json server/
|
|
RUN npm install --prefix server
|
|
|
|
COPY server/src/ server/src/
|
|
RUN npm run build --prefix server
|
|
|
|
# ── Stage 3: runtime ──────────────────────────────────────────────────────────
|
|
FROM node:24-slim
|
|
|
|
WORKDIR /app
|
|
|
|
# better-sqlite3 needs to rebuild its native addon here too, then the
|
|
# build toolchain is dropped again to keep the runtime image lean.
|
|
RUN apt-get update -q && apt-get install -y --no-install-recommends python3 make g++ \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Production-only server dependencies (no tsx, no typescript)
|
|
COPY server/package*.json server/
|
|
RUN npm install --prefix server --omit=dev \
|
|
&& apt-get purge -y python3 make g++ && apt-get autoremove -y
|
|
|
|
# Compiled server + built client
|
|
COPY --from=server-build /app/server/dist server/dist
|
|
COPY --from=client-build /app/client/dist client/dist
|
|
|
|
# Do NOT copy data/ — that's a mutable runtime volume holding the SQLite
|
|
# DB and ciphertext blobs. Baking it into the image would clobber it on
|
|
# every redeploy.
|
|
ENV NODE_ENV=production
|
|
ENV PORT=3000
|
|
ENV DATA_DIR=/app/data
|
|
|
|
EXPOSE 3000
|
|
|
|
CMD ["node", "server/dist/index.js"]
|