SvelteKit 2 + Svelte 5 + TypeScript site. SQLite via Drizzle. Gitea OAuth for authoring (RnD org-gated). Pure SVG + CSS DNA helix on landing. What lands - Landing hero with animated two-strand SVG helix + tagline - /projects + /projects/[slug] (markdown body, dashboard embed allowlist) - /posts + /posts/[slug] - Auth-gated /projects/new + /posts/new forms - Gitea OAuth flow (state, code exchange, org-membership check, sessions) - Sliding-window cookie sessions (SHA-256 hashed token storage) - Dockerfile + docker-compose with named-volume SQLite - Idempotent seed (EVOLV + HELIX projects, welcome post) Stack notes - Tailwind v3 (Node 18 compat; v4 needs Node 20+) - drizzle-orm 0.45+ (patched, no SQL-identifier escape vuln) - marked for markdown; iframe embeds gated by DASHBOARD_ALLOWED_HOSTS Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
44 lines
1.2 KiB
Docker
44 lines
1.2 KiB
Docker
# syntax=docker/dockerfile:1.7
|
|
|
|
# ---- build stage ----
|
|
FROM node:20-bookworm-slim AS build
|
|
WORKDIR /app
|
|
|
|
# better-sqlite3 needs build tools when no prebuilt is available
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
python3 make g++ \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
COPY package.json package-lock.json* ./
|
|
RUN npm install --include=dev
|
|
|
|
COPY . .
|
|
RUN npm run build
|
|
RUN npm prune --omit=dev
|
|
|
|
# ---- runtime stage ----
|
|
FROM node:20-bookworm-slim AS runtime
|
|
WORKDIR /app
|
|
|
|
ENV NODE_ENV=production \
|
|
PORT=3000 \
|
|
DATABASE_URL=/data/helix.db
|
|
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
ca-certificates \
|
|
&& rm -rf /var/lib/apt/lists/* \
|
|
&& mkdir -p /data \
|
|
&& chown node:node /data
|
|
|
|
COPY --from=build --chown=node:node /app/build ./build
|
|
COPY --from=build --chown=node:node /app/node_modules ./node_modules
|
|
COPY --from=build --chown=node:node /app/package.json ./package.json
|
|
COPY --from=build --chown=node:node /app/drizzle ./drizzle
|
|
COPY --from=build --chown=node:node /app/scripts ./scripts
|
|
|
|
USER node
|
|
EXPOSE 3000
|
|
|
|
# Run migrations then start the SvelteKit Node server.
|
|
CMD ["sh", "-c", "node scripts/migrate.js && node build"]
|