julian
8155ff456b
Containerize the two non-desktop apps for the booth appliance. The desktop app stays on its own tag-only release.yml. - apps/server/Dockerfile: multi-stage node:22-alpine. `pnpm deploy --legacy --prod` (NOT prune — the monorepo native better-sqlite3 won't resolve under a root prune) yields a self-contained bundle; build stage adds node-gyp toolchain, runtime adds libstdc++; non-root, healthcheck. Migrates the mounted DB on boot via a drizzle-kit- free runtime migrator (packages/db/scripts/migrate-runtime.mjs) — drizzle-kit is a devDep, pruned from prod. - apps/server/src/static-spa.ts: Fastify serves the built React SPA (one container serves API + UI). GET-only fallback to index.html, excludes /api + /health so it never shadows the backend; a no-op in dev (no dist). Registered last in server.ts. - apps/vision/Dockerfile: uv base, --extra alpr, model weights PRE-WARMED into the image as the runtime user so fast_alpr boots offline (0 downloads at runtime). Engine env- selected (VISION_RECOGNIZER stub|fast_alpr). - Branch-aware: docker-compose.yml (base) + .dev.yml (build local, stub, ports) + .prod.yml (pull pinned, fast_alpr, vision internal, restart always); REGISTRY/TAG from env so a branch deploy pulls that branch's image. - .gitea/workflows/build-images.yml: on push to dev/main, run the full turbo build+lint+ test gate, then buildx push both images to git.infra.msai.al/mca/parking_solution with branch + branch-<sha> tags (registry cache; optional Komodo webhook behind KOMODO_ENABLED). - .dockerignore excludes **/parking.sqlite* so the signed ledger is NEVER baked. Verified locally (Docker 29): server image migrates + serves API+SPA (/health 200, / + /booth HTML, /api/nope JSON 404, no sqlite outside /data); vision image boots fast_alpr with 0 runtime downloads; compose stack healthy with server→vision over the private network. Wiki: new container-deployment.md; vision-service-packaging open Qs resolved; index + log. Claude-Session: https://claude.ai/code/session_01Xcm6ikLgGoCxxHrxtjkk5V
45 lines
1.0 KiB
Plaintext
45 lines
1.0 KiB
Plaintext
# Build context hygiene for the server + vision images (context = repo root).
|
|
# Keep the context small and NEVER bake build artifacts, secrets, or the live DB.
|
|
|
|
# Node / build outputs (rebuilt inside the image)
|
|
**/node_modules/
|
|
**/dist/
|
|
**/.turbo/
|
|
**/*.tsbuildinfo
|
|
.turbo/
|
|
|
|
# Python (vision) — rebuilt by uv inside the image
|
|
**/.venv/
|
|
**/__pycache__/
|
|
**/.mypy_cache/
|
|
**/.pytest_cache/
|
|
**/.ruff_cache/
|
|
|
|
# Secrets + local env (the image gets config via runtime env, never baked)
|
|
**/.env
|
|
**/.env.local
|
|
|
|
# NEVER bake the live signed-ledger DB (or any of its WAL/SHM/backup variants) into an
|
|
# image — it lives on a mounted volume. Match the base file AND every -wal/-shm/.bak-*
|
|
# sibling (deploy copies the package dir's files, ignoring .gitignore).
|
|
**/*.sqlite
|
|
**/*.sqlite-*
|
|
**/parking.sqlite*
|
|
|
|
# Desktop app is built by its own tag-only release.yml, not these images
|
|
apps/desktop/
|
|
|
|
# VCS, logs, caches, editor cruft
|
|
.git/
|
|
.github/
|
|
*.log
|
|
**/.DS_Store
|
|
.vscode/
|
|
.idea/
|
|
|
|
# Wiki raw sources / large docs (not needed to build)
|
|
wiki/raw/
|
|
|
|
# Plans / scratch
|
|
.planning/
|