ToolCTRLandClaude Opus 4.7
616cd60c6d
Deploy / build-and-deploy (push) Successful in 20s
Solange in der Coolify-Umgebung kein clamd erreichbar ist, würden GameJam-Uploads sonst mit 503 (fail-closed) abgelehnt. Für den TechDay morgen schalten wir den Scan im Container-ENV ab; Uploads laufen unverändert, nur ohne Virenprüfung. Lokal bleibt der Default true (Scan aktiv, wenn clamd läuft). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
36 lines
905 B
Docker
36 lines
905 B
Docker
FROM node:22-bookworm-slim
|
|
|
|
LABEL org.opencontainers.image.description="ToolCTRL Website"
|
|
|
|
ARG APP_REVISION=local
|
|
|
|
ENV NODE_ENV=production \
|
|
PORT=3000 \
|
|
HOST=0.0.0.0 \
|
|
DATA_DIR=/app/data \
|
|
CLAMAV_ENABLED=false \
|
|
APP_REVISION=${APP_REVISION}
|
|
|
|
RUN apt-get update \
|
|
&& DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends ca-certificates curl \
|
|
&& rm -rf /var/lib/apt/lists/* \
|
|
&& groupadd --gid 1001 nodejs \
|
|
&& useradd --uid 1001 --gid nodejs --home-dir /app --shell /usr/sbin/nologin nodejs
|
|
|
|
WORKDIR /app
|
|
|
|
COPY --chown=nodejs:nodejs public ./public
|
|
COPY --chown=nodejs:nodejs server.js ./server.js
|
|
|
|
RUN mkdir -p /app/data \
|
|
&& chown -R nodejs:nodejs /app/data
|
|
|
|
USER nodejs
|
|
|
|
EXPOSE 3000
|
|
|
|
HEALTHCHECK --interval=30s --timeout=3s --start-period=10s --retries=3 \
|
|
CMD curl -fsS http://127.0.0.1:3000/healthz >/dev/null || exit 1
|
|
|
|
CMD ["node", "server.js"]
|