julian
8155ff456b
Containerize the two non-desktop apps for the booth appliance. The desktop app stays on its own tag-only release.yml. - apps/server/Dockerfile: multi-stage node:22-alpine. `pnpm deploy --legacy --prod` (NOT prune — the monorepo native better-sqlite3 won't resolve under a root prune) yields a self-contained bundle; build stage adds node-gyp toolchain, runtime adds libstdc++; non-root, healthcheck. Migrates the mounted DB on boot via a drizzle-kit- free runtime migrator (packages/db/scripts/migrate-runtime.mjs) — drizzle-kit is a devDep, pruned from prod. - apps/server/src/static-spa.ts: Fastify serves the built React SPA (one container serves API + UI). GET-only fallback to index.html, excludes /api + /health so it never shadows the backend; a no-op in dev (no dist). Registered last in server.ts. - apps/vision/Dockerfile: uv base, --extra alpr, model weights PRE-WARMED into the image as the runtime user so fast_alpr boots offline (0 downloads at runtime). Engine env- selected (VISION_RECOGNIZER stub|fast_alpr). - Branch-aware: docker-compose.yml (base) + .dev.yml (build local, stub, ports) + .prod.yml (pull pinned, fast_alpr, vision internal, restart always); REGISTRY/TAG from env so a branch deploy pulls that branch's image. - .gitea/workflows/build-images.yml: on push to dev/main, run the full turbo build+lint+ test gate, then buildx push both images to git.infra.msai.al/mca/parking_solution with branch + branch-<sha> tags (registry cache; optional Komodo webhook behind KOMODO_ENABLED). - .dockerignore excludes **/parking.sqlite* so the signed ledger is NEVER baked. Verified locally (Docker 29): server image migrates + serves API+SPA (/health 200, / + /booth HTML, /api/nope JSON 404, no sqlite outside /data); vision image boots fast_alpr with 0 runtime downloads; compose stack healthy with server→vision over the private network. Wiki: new container-deployment.md; vision-service-packaging open Qs resolved; index + log. Claude-Session: https://claude.ai/code/session_01Xcm6ikLgGoCxxHrxtjkk5V
30 lines
1004 B
YAML
30 lines
1004 B
YAML
# DEV override: build the images locally from the Dockerfiles, expose both ports, run the
|
|
# stub recognizer (no model load), and verbose logging. Use with the base file:
|
|
# docker compose -f docker-compose.yml -f docker-compose.dev.yml up --build
|
|
|
|
services:
|
|
server:
|
|
build:
|
|
context: .
|
|
dockerfile: apps/server/Dockerfile
|
|
environment:
|
|
LOG_LEVEL: debug
|
|
# Dev convenience: seed an admin on first boot (set ADMIN_PASS to enable).
|
|
SEED_ADMIN: ${SEED_ADMIN:-0}
|
|
ADMIN_USER: ${ADMIN_USER:-admin}
|
|
ADMIN_PASS: ${ADMIN_PASS:-}
|
|
# 32+ chars and must NOT contain dev-only/insecure/change-me (auth.ts rejects those).
|
|
# This is a fixed LOCAL-DEV value only; prod injects a real `openssl rand -hex 32`.
|
|
JWT_SECRET: ${JWT_SECRET:-localdevsecret0123456789abcdef0123}
|
|
ports:
|
|
- "3000:3000"
|
|
|
|
vision:
|
|
build:
|
|
context: apps/vision
|
|
dockerfile: Dockerfile
|
|
environment:
|
|
VISION_RECOGNIZER: stub
|
|
ports:
|
|
- "8089:8089"
|