tajniak81andClaude Opus 5
f08849e50c
The all-in-one image builds from the project root, and Docker only reads .dockerignore from the context root — so the ones under "API Server" and "Web App" never applied to it and every AIO build shipped the whole tree, "Phone App/build" included. A root .dockerignore allow-lists the paths that build actually copies. The dev split stack passed neither PB_BOOTSTRAP nor the SUPERADMIN vars, so it created the schema and then no user to log in with. It passes them now, and .env.example says so. WEBAPP_URL was never set anywhere, leaving the panel status page probing localhost:8090 — itself — and always reporting the Web App as down. Each compose file now points it at wherever the Web App really is, and the BFF grew a real /healthz instead of letting the SPA fallback answer probes with index.html and look healthy no matter what. In the AIO, PocketBase and the API Server drop to an unprivileged user; only nginx stays root to bind :80. The entrypoint takes ownership of the two volumes first, so data written by the old root-only image stays writable. All three images carry a HEALTHCHECK, every compose file declares one too (so depends_on still gates against an older pulled image), and web-app waits for the API Server to be serving rather than merely started. Also: pinned alpine/golang/node and PocketBase 0.39.11, so a rebuild months from now produces the same image; nginx forwards WebSocket upgrades instead of stripping them, with the map in http.d where Alpine actually reads it; and a .gitattributes keeps entrypoint.sh on LF, because a CRLF shebang from a Windows clone fails at container start with "no such file or directory". Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
38 lines
1.3 KiB
Docker
38 lines
1.3 KiB
Docker
# syntax=docker/dockerfile:1
|
|
|
|
# PocketBase built from the official release binary.
|
|
FROM alpine:3.24
|
|
|
|
# Pinned so a rebuild months from now produces the same PocketBase. Override to
|
|
# upgrade (--build-arg PB_VERSION=0.40.0); set it to empty to resolve the latest
|
|
# release at build time, which needs an unauthenticated GitHub API call and is
|
|
# therefore subject to that GitHub rate limit (60/hour per IP).
|
|
ARG PB_VERSION="0.39.11"
|
|
# Provided automatically by BuildKit (amd64 / arm64).
|
|
ARG TARGETARCH="amd64"
|
|
|
|
RUN apk add --no-cache ca-certificates unzip wget
|
|
|
|
WORKDIR /pb
|
|
|
|
RUN set -eux; \
|
|
ver="${PB_VERSION}"; \
|
|
if [ -z "$ver" ]; then \
|
|
ver="$(wget -qO- https://api.github.com/repos/pocketbase/pocketbase/releases/latest \
|
|
| grep -o '"tag_name": *"v[^"]*"' | head -1 | sed -E 's/.*"v([^"]+)".*/\1/')"; \
|
|
fi; \
|
|
echo "Installing PocketBase v${ver} (${TARGETARCH})"; \
|
|
wget -q -O /tmp/pb.zip \
|
|
"https://github.com/pocketbase/pocketbase/releases/download/v${ver}/pocketbase_${ver}_linux_${TARGETARCH}.zip"; \
|
|
unzip /tmp/pb.zip -d /pb; \
|
|
rm /tmp/pb.zip
|
|
|
|
COPY entrypoint.sh /entrypoint.sh
|
|
RUN chmod +x /entrypoint.sh
|
|
|
|
# pb_data holds the SQLite database and uploads — mount a volume here.
|
|
VOLUME /pb/pb_data
|
|
EXPOSE 8070
|
|
|
|
ENTRYPOINT ["/entrypoint.sh"]
|