FROM node:22-alpine AS base # FFmpeg for video transcoding (HLS), thumbnail extraction, and metadata RUN apk add --no-cache ffmpeg # Install dependencies only when needed FROM base AS deps WORKDIR /app COPY package.json package-lock.json* ./ RUN npm ci --ignore-scripts RUN npx prisma generate || true # Rebuild source code only when needed FROM base AS builder WORKDIR /app COPY --from=deps /app/node_modules ./node_modules COPY . . # Generate Prisma client RUN npx prisma generate # Build the Next.js app RUN npm run build # Production image FROM base AS runner WORKDIR /app ENV NODE_ENV=production RUN addgroup --system --gid 1001 nodejs RUN adduser --system --uid 1001 nextjs COPY --from=builder /app/public ./public # Copy Next.js standalone output COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./ COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static # Copy Prisma schema, config, and migrations for runtime COPY --from=builder /app/prisma ./prisma COPY --from=builder /app/prisma.config.ts ./prisma.config.ts COPY --from=builder /app/src/generated ./src/generated # Install runtime deps needed for migrations + seed. The Next.js standalone # bundle covers the app itself, but the seed script (prisma/seed-dow.ts) is # a separate .ts file executed via tsx and needs its own module graph: # prisma — the migrate-deploy CLI # dotenv — prisma.config.ts imports dotenv/config # tsx — runs the seed without an ahead-of-time compile # @prisma/adapter-pg — the driver the seed instantiates directly # bcryptjs — the seed hashes the admin's temp password RUN npm install --no-save \ prisma@7.4.2 \ dotenv@17.3.1 \ tsx@4 \ @prisma/adapter-pg@7.4.2 \ bcryptjs@3 # Create uploads directories for media storage RUN mkdir -p /data/uploads && chown nextjs:nodejs /data/uploads RUN mkdir -p /app/public/uploads/revisions && chown -R nextjs:nodejs /app/public/uploads USER nextjs EXPOSE 3000 ENV PORT=3000 ENV HOSTNAME="0.0.0.0" CMD ["sh", "-c", "./node_modules/.bin/prisma migrate deploy && node server.js"]