28d346d0f5
All checks were successful
Build and Push Docker Image / build-and-push (push) Successful in 54m48s
Admin → Backup: Ziel (SFTP oder Nextcloud/WebDAV) konfigurieren, Verbindung testen, Jetzt sichern,
Zeitplan (aus/täglich/wöchentlich) + Aufbewahrung. Best Practice: verschlüsselt + off-site.
- Verschlüsselung: Backup als tar.gz (database.dump + MinIO-Dateien) → AES-256-GCM mit Passphrase.
Zugangsdaten + Passphrase verschlüsselt in DB (src/lib/crypto-secret.ts, Schlüssel aus Server-Secret)
- Engine (src/lib/backup): pg_dump + archiver-Stream aus MinIO + Stream-Verschlüsselung + Upload + Prune
- Ziel-Adapter: SFTP (ssh2-sftp-client) + WebDAV (webdav), je test/upload/list/delete
- API (SERVER_ADMIN): /api/admin/backup/{config,test,run}; öffentlich per CRON_SECRET: /api/cron/backup
- Scheduler in server-custom.js (stündliche Fälligkeitsprüfung)
- Dockerfile: postgresql16-client (pg_dump) + runtime-Libs; next.config serverExternalPackages
- scripts/decrypt-backup.js + docs/BACKUP.md (Restore-Anleitung), .env.example (CRON_SECRET, BACKUP_ENC_KEY)
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
73 lines
3.0 KiB
Docker
73 lines
3.0 KiB
Docker
# syntax=docker/dockerfile:1
|
|
# Stage 1: Dependencies
|
|
FROM node:20-alpine AS deps
|
|
RUN apk add --no-cache libc6-compat openssl
|
|
WORKDIR /app
|
|
|
|
COPY package.json package-lock.json* ./
|
|
# npm-Cache über BuildKit persistent halten (schnellere Re-Installs)
|
|
RUN --mount=type=cache,target=/root/.npm npm ci --ignore-scripts --legacy-peer-deps
|
|
|
|
# Stage 2: Builder
|
|
FROM node:20-alpine AS builder
|
|
RUN apk add --no-cache openssl
|
|
WORKDIR /app
|
|
COPY --from=deps /app/node_modules ./node_modules
|
|
COPY . .
|
|
|
|
# Generate Prisma Client
|
|
RUN npx prisma generate
|
|
|
|
# Copy docker-specific env for build (DATABASE_URL pointing to 'db' service)
|
|
COPY .env.docker .env
|
|
|
|
# Build Next.js
|
|
ENV NEXT_TELEMETRY_DISABLED=1
|
|
# .next/cache über BuildKit persistent halten → inkrementeller Build statt jedes Mal von Null
|
|
RUN --mount=type=cache,target=/app/.next/cache npm run build
|
|
|
|
# Stage 3: Runner
|
|
FROM node:20-alpine AS runner
|
|
# openssl (Prisma) + postgresql16-client (pg_dump/pg_restore für GUI-Backup, passend zu postgres:16)
|
|
RUN apk add --no-cache openssl postgresql16-client
|
|
|
|
ENV NODE_ENV=production
|
|
ENV NEXT_TELEMETRY_DISABLED=1
|
|
|
|
RUN addgroup --system --gid 1001 nodejs && \
|
|
adduser --system --uid 1001 nextjs
|
|
|
|
WORKDIR /app
|
|
# Fast: only chown the /app directory itself, not recursively
|
|
RUN chown nextjs:nodejs /app
|
|
|
|
USER nextjs
|
|
|
|
# Install only the unbundled runtime deps needed by the custom server.
|
|
# Running as USER nextjs means files are already correctly owned — no slow chown -R needed afterwards.
|
|
RUN npm install --omit=dev --legacy-peer-deps socket.io@4.7.4 @react-pdf/renderer@4.3.2 qrcode@1.5.4 ssh2-sftp-client@12.1.1 webdav@5.10.0 archiver@8.0.0 --no-save
|
|
|
|
COPY --chown=nextjs:nodejs --from=builder /app/.next/standalone ./
|
|
COPY --chown=nextjs:nodejs --from=builder /app/.next/static ./.next/static
|
|
# Ensure all public files (videos, images, etc.) are present in the runtime image
|
|
COPY --chown=nextjs:nodejs --from=builder /app/public ./public
|
|
COPY --chown=nextjs:nodejs --from=builder /app/.env ./.env
|
|
COPY --chown=nextjs:nodejs --from=builder /app/prisma ./prisma
|
|
COPY --chown=nextjs:nodejs --from=builder /app/node_modules/.prisma ./node_modules/.prisma
|
|
COPY --chown=nextjs:nodejs --from=builder /app/node_modules/prisma ./node_modules/prisma
|
|
COPY --chown=nextjs:nodejs --from=builder /app/node_modules/@prisma ./node_modules/@prisma
|
|
COPY --chown=nextjs:nodejs --from=builder /app/node_modules/bcryptjs ./node_modules/bcryptjs
|
|
COPY --chown=nextjs:nodejs --from=builder /app/node_modules/stripe ./node_modules/stripe
|
|
COPY --chown=nextjs:nodejs --from=builder /app/node_modules/next ./node_modules/next
|
|
COPY --chown=nextjs:nodejs --from=builder /app/node_modules/react ./node_modules/react
|
|
COPY --chown=nextjs:nodejs --from=builder /app/node_modules/react-dom ./node_modules/react-dom
|
|
COPY --chown=nextjs:nodejs --from=builder /app/package.json ./package.json
|
|
COPY --chown=nextjs:nodejs server-custom.js ./server-custom.js
|
|
COPY --chown=nextjs:nodejs docker-entrypoint.sh ./docker-entrypoint.sh
|
|
|
|
EXPOSE 3000
|
|
ENV PORT=3000
|
|
ENV HOSTNAME="0.0.0.0"
|
|
|
|
CMD ["sh", "docker-entrypoint.sh"]
|