f1fdf27012
- Repo scaffolding: .gitignore, .env.example, Makefile, docker-compose.yml, README.md, CHANGELOG.md, pre-commit config. - Three-service stack: api (Flask 3), db (postgres:16-alpine), front (nginx serving the Vite bundle). Named volumes metamorph_db + metamorph_evidence. - Backend skeleton: Flask app factory, JSON structured logging on stdout, GET /api/v1/health, multi-stage Dockerfile, pyproject.toml driven by uv, Pydantic Settings with secret guard rails (refuses to boot in non-dev with placeholders), APP_ENV gating. - Frontend skeleton: Vite + React 18 + TypeScript strict + TailwindCSS, RTOps design tokens from tasks/design.md, self-hosted JetBrains Mono / IBM Plex Sans via @fontsource, base UI primitives (Card/Tag/SectionHeader/FlowNode/ Button), home page wired to /api/v1/health. - Engine-agnostic Makefile: auto-detects docker or podman, picks the matching compose driver. Targets: up/down/build/rebuild/dev/lint/fmt/test/migrate/ seed-mitre/print-install-token/e2e/inspect-health. - Playwright suite: e2e/tests/m0-smoke.spec.ts (8 tests) + HTML + JUnit reports + traces on retry. - Docs: tasks/spec.md (finalized after Q&A), tasks/design.md, tasks/todo.md (14 milestones), tasks/testing-m0.md, tasks/lessons.md. DoD: make up + make health + make e2e all pass on podman 5.x (Fedora) and docker. TLS terminated by external reverse proxy (spec §6 NF-network). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
32 lines
933 B
Docker
32 lines
933 B
Docker
# syntax=docker/dockerfile:1.7
|
|
|
|
# === Stage 1: build the SPA bundle ===
|
|
FROM docker.io/library/node:20-alpine AS builder
|
|
|
|
ARG VITE_API_BASE_URL=/api/v1
|
|
ENV VITE_API_BASE_URL=${VITE_API_BASE_URL}
|
|
|
|
WORKDIR /app
|
|
COPY package.json ./
|
|
# When a lockfile is committed (npm/pnpm/yarn), prefer `npm ci` for reproducibility.
|
|
RUN if [ -f package-lock.json ]; then npm ci; else npm install --no-audit --no-fund; fi
|
|
|
|
COPY tsconfig*.json vite.config.ts tailwind.config.ts postcss.config.js index.html ./
|
|
COPY src ./src
|
|
|
|
RUN npm run build
|
|
|
|
# === Stage 2: serve via nginx ===
|
|
FROM docker.io/library/nginx:1.27-alpine AS runtime
|
|
|
|
# Drop the default config and use ours.
|
|
RUN rm -f /etc/nginx/conf.d/default.conf
|
|
COPY nginx.conf /etc/nginx/conf.d/metamorph.conf
|
|
|
|
COPY --from=builder /app/dist /usr/share/nginx/html
|
|
|
|
EXPOSE 80
|
|
|
|
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
|
|
CMD wget -qO- http://127.0.0.1/healthz || exit 1
|