mirror of
https://github.com/kevinveenbirkenbach/homepage.veen.world.git
synced 2026-09-10 21:26:48 +00:00
Kevin Veen-Birkenbach
793e2de899
The image ran npm install without --omit=dev, so every published tag carried Cypress with its downloaded binary, ESLint and the whole dev tree next to nodejs and npm. The npm install layer alone was 229 MB of the 349 MB compressed 2.0.0 image, and all seven npm audit findings (extract-zip, form-data, tmp, qs, uuid via @cypress/request) came from it, although the app only serves five vendored asset directories. A node:22-slim stage now runs npm install --omit=dev, whose postinstall writes static/vendor, and the final runtime stage copies just that directory onto the Python base. A dev stage keeps nodejs and npm for docker-compose, which bind-mounts app/ and runs npm install on start; compose now builds that target. .dockerignore keeps a local app/node_modules and app/static/vendor out of COPY app/. Measured on make build: the runtime image is 142 MB uncompressed, has no node, npm, node_modules or Cypress cache, and serves /, /de/ and every vendored asset with 200. The dev stage has node 20.19.2 and npm 9.2.0. make test passes, hadolint included, with 107 Cypress tests. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
28 lines
961 B
YAML
28 lines
961 B
YAML
services:
|
|
portfolio:
|
|
# SPOT: IMAGE_NAME comes from .env (see env.example). No default —
|
|
# an empty tag would have compose fall back to `portfolio-portfolio`
|
|
# silently, which `make run-dev` would then fail to find.
|
|
image: ${IMAGE_NAME:?IMAGE_NAME must be set in .env (see env.example)}
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile
|
|
target: dev
|
|
container_name: portfolio
|
|
ports:
|
|
- "${PORT:?PORT must be set in .env (see env.example)}:${PORT:?PORT must be set in .env (see env.example)}"
|
|
env_file:
|
|
- .env
|
|
volumes:
|
|
- ./app:/app
|
|
- node_modules:/app/node_modules
|
|
- vendor:/app/static/vendor
|
|
# Run `npm install` on every container start so the named volumes
|
|
# reflect the current package.json (postinstall regenerates vendor/).
|
|
command: sh -c "npm install --prefix /app --no-audit --no-fund && python app.py"
|
|
restart: unless-stopped
|
|
|
|
volumes:
|
|
node_modules:
|
|
vendor:
|