homeio

1# ─── Stage 1: deps ────────────────────────────────────────────────────────────
2FROM node:22-alpine AS deps
3WORKDIR /app
4
5COPY package.json package-lock.json ./
6COPY packages/server-only/package.json packages/server-only/
7RUN npm ci --ignore-scripts
8
9# ─── Stage 2: builder ─────────────────────────────────────────────────────────
10FROM node:22-alpine AS builder
11WORKDIR /app
12
13COPY --from=deps /app/node_modules ./node_modules
14COPY . .
15
16ENV NODE_ENV=production
17ENV NEXT_TELEMETRY_DISABLED=1
18ENV NEXT_OUTPUT=standalone
19# Dummy values so Next.js build doesn't fail on env validation
20ENV DATABASE_URL=postgresql://placeholder:placeholder@localhost:5432/placeholder
21ENV AUTH_SESSION_SECRET=placeholder-build-secret-32-chars-min
22
23RUN npm run build
24
25# ─── Stage 3: runner ──────────────────────────────────────────────────────────
26FROM node:22-alpine AS runner
27WORKDIR /app
28
29ENV NODE_ENV=production
30ENV NEXT_TELEMETRY_DISABLED=1
31
32# docker-cli / docker-cli-compose: the app shells out to `docker compose` to
33# install and run every app. su-exec: the entrypoint starts as root to line the
34# app user up with the Docker socket group, then drops back down. lsblk: the
35# Monitor's Disks tab lists the host's disks with it (read-only in Docker).
36RUN apk add --no-cache git unzip docker-cli docker-cli-compose su-exec lsblk && \
37    addgroup --system --gid 1001 homeio && \
38    adduser --system --uid 1001 homeio && \
39    mkdir -p /DATA && \
40    chown homeio:homeio /app /DATA
41
42# Next.js standalone output
43COPY --from=builder --chown=homeio:homeio /app/.next/standalone ./
44COPY --from=builder --chown=homeio:homeio /app/.next/static ./.next/static
45COPY --from=builder --chown=homeio:homeio /app/public ./public
46
47# Server-side compiled output
48COPY --from=builder --chown=homeio:homeio /app/dist-server ./dist-server
49
50# dbus-helper sidecar
51COPY --from=builder --chown=homeio:homeio /app/services/dbus-helper ./services/dbus-helper
52
53# node_modules needed for drizzle-kit push at runtime (migrations)
54COPY --from=deps --chown=homeio:homeio /app/node_modules ./node_modules
55
56# Drizzle config + schema for migrations
57COPY --from=builder --chown=homeio:homeio /app/drizzle.config.ts ./drizzle.config.ts
58COPY --from=builder --chown=homeio:homeio /app/lib/server/db/schema.ts ./lib/server/db/schema.ts
59
60# Entrypoint
61COPY --chown=homeio:homeio docker-entrypoint.sh ./docker-entrypoint.sh
62RUN chmod +x docker-entrypoint.sh
63
64# Deliberately root: the entrypoint needs it to join the socket's group, and it
65# drops to the homeio user before starting the app.
66
67EXPOSE 3000
68
69HEALTHCHECK --interval=30s --timeout=10s --start-period=30s --retries=5 \
70  CMD wget -qO- "http://127.0.0.1:${PORT:-3000}/api/health" || exit 1
71
72CMD ["sh", "docker-entrypoint.sh"]
73