litiantian03
b8a7e8c67a
- Add leader election to avoid duplicate sync and Team event consumers - Proxy desktop traffic directly from nginx to instance Services to reduce load during concurrent viewers - Add desktop stream profiles with low / standard / high options - Limit hostPath PV fallback to manual storageClass only
52 lines
1.3 KiB
Docker
52 lines
1.3 KiB
Docker
FROM --platform=$BUILDPLATFORM node:20-alpine AS frontend-builder
|
|
|
|
WORKDIR /app/frontend
|
|
|
|
COPY frontend/package*.json ./
|
|
RUN npm ci
|
|
|
|
COPY frontend/ ./
|
|
RUN npm run build
|
|
|
|
FROM --platform=$BUILDPLATFORM golang:1.26.1-alpine AS backend-builder
|
|
|
|
WORKDIR /app/backend
|
|
|
|
ARG TARGETOS
|
|
ARG TARGETARCH
|
|
|
|
ARG GOPROXY
|
|
ARG GOSUMDB
|
|
ARG GOFLAGS
|
|
ENV GOFLAGS=${GOFLAGS}
|
|
|
|
RUN apk add --no-cache git
|
|
|
|
COPY backend/go.mod backend/go.sum ./
|
|
RUN go mod download
|
|
|
|
COPY backend/ ./
|
|
RUN CGO_ENABLED=0 GOOS=${TARGETOS:-linux} GOARCH=${TARGETARCH} go build -trimpath -buildvcs=false -ldflags="-s -w -buildid=" -o /out/clawreef-server ./cmd/server
|
|
|
|
FROM nginx:1.27-alpine
|
|
|
|
# nginx-module-njs provides ngx_http_js_module.so, loaded by nginx.conf to run
|
|
# the desktop access-token verification (deployments/nginx/njs/desktop_auth.js).
|
|
RUN apk add --no-cache dumb-init openssl nginx-module-njs
|
|
|
|
WORKDIR /app
|
|
|
|
COPY --from=backend-builder /out/clawreef-server /usr/local/bin/clawreef-server
|
|
COPY --from=frontend-builder /app/frontend/dist /usr/share/nginx/html
|
|
COPY deployments/nginx/nginx.conf /etc/nginx/nginx.conf
|
|
COPY deployments/nginx/njs/desktop_auth.js /etc/nginx/njs/desktop_auth.js
|
|
COPY deployments/container/start.sh /app/start.sh
|
|
|
|
RUN chmod +x /app/start.sh \
|
|
&& mkdir -p /etc/nginx/tls /var/log/clawreef
|
|
|
|
EXPOSE 8443
|
|
|
|
ENTRYPOINT ["dumb-init", "--"]
|
|
CMD ["/app/start.sh"]
|