| ADD alpine-minirootfs-3.21.3-x86_64.tar.gz / # buildkit |
| CMD ["/bin/sh"] |
| ENV NODE_VERSION=18.20.8 |
| RUN /bin/sh -c addgroup -g 1000 node && adduser -u 1000 -G node -s /bin/sh -D node && apk add --no-cache libstdc++ && apk add --no-cache --virtual .build-deps curl && ARCH= OPENSSL_ARCH='linux*' && alpineArch="$(apk --print-arch)" && case "${alpineArch##*-}" in x86_64) ARCH='x64' CHECKSUM="2c75d5d562d3ffc049ca1bbea65b68ae6bd0ec50ed04b1f606e065eaf35e8599" OPENSSL_ARCH=linux-x86_64;; x86) OPENSSL_ARCH=linux-elf;; aarch64) OPENSSL_ARCH=linux-aarch64;; arm*) OPENSSL_ARCH=linux-armv4;; ppc64le) OPENSSL_ARCH=linux-ppc64le;; s390x) OPENSSL_ARCH=linux-s390x;; *) ;; esac && if [ -n "${CHECKSUM}" ]; then set -eu; curl -fsSLO --compressed "https://unofficial-builds.nodejs.org/download/release/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz"; echo "$CHECKSUM node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz" | sha256sum -c - && tar -xJf "node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz" -C /usr/local --strip-components=1 --no-same-owner && ln -s /usr/local/bin/node /usr/local/bin/nodejs; else echo "Building from source" && apk add --no-cache --virtual .build-deps-full binutils-gold g++ gcc gnupg libgcc linux-headers make python3 py-setuptools && export GNUPGHOME="$(mktemp -d)" && for key in C0D6248439F1D5604AAFFB4021D900FFDB233756 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 CC68F5A3106FF448322E48ED27F5E38D5B0A215F 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 ; do gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" || gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" ; done && curl -fsSLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION.tar.xz" && curl -fsSLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc" && gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc && gpgconf --kill all && rm -rf "$GNUPGHOME" && grep " node-v$NODE_VERSION.tar.xz\$" SHASUMS256.txt | sha256sum -c - && tar -xf "node-v$NODE_VERSION.tar.xz" && cd "node-v$NODE_VERSION" && ./configure && make -j$(getconf _NPROCESSORS_ONLN) V= && make install && apk del .build-deps-full && cd .. && rm -Rf "node-v$NODE_VERSION" && rm "node-v$NODE_VERSION.tar.xz" SHASUMS256.txt.asc SHASUMS256.txt; fi && rm -f "node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz" && find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name "$OPENSSL_ARCH" -exec rm -rf {} \; && apk del .build-deps && node --version && npm --version # buildkit |
| ENV YARN_VERSION=1.22.22 |
| RUN /bin/sh -c apk add --no-cache --virtual .build-deps-yarn curl gnupg tar && export GNUPGHOME="$(mktemp -d)" && for key in 6A010C5166006599AA17F08146C2130DFD2497F5 ; do gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" || gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" ; done && curl -fsSLO --compressed "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz" && curl -fsSLO --compressed "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz.asc" && gpg --batch --verify yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz && gpgconf --kill all && rm -rf "$GNUPGHOME" && mkdir -p /opt && tar -xzf yarn-v$YARN_VERSION.tar.gz -C /opt/ && ln -s /opt/yarn-v$YARN_VERSION/bin/yarn /usr/local/bin/yarn && ln -s /opt/yarn-v$YARN_VERSION/bin/yarnpkg /usr/local/bin/yarnpkg && rm yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz && apk del .build-deps-yarn && yarn --version && rm -rf /tmp/* # buildkit |
| COPY docker-entrypoint.sh /usr/local/bin/ # buildkit |
| ENTRYPOINT ["docker-entrypoint.sh"] |
| CMD ["node"] |
| ARG NODE_ENV=production |
| ARG BUILD_VERSION=latest |
| ENV NODE_ENV=production BUILD_VERSION=latest TZ=Europe/Berlin HOME=/home/appuser |
| RUN |2 NODE_ENV=production BUILD_VERSION=latest /bin/sh -c apk add --no-cache nginx supervisor curl wget tzdata tini su-exec shadow git python3 make g++ && rm -rf /var/cache/apk/* # buildkit |
| RUN |2 NODE_ENV=production BUILD_VERSION=latest /bin/sh -c npm install -g @anthropic-ai/claude-code 2>/dev/null && which claude && echo "✅ Claude CLI installiert" || echo "⚠️ Claude CLI nicht verfügbar" # buildkit |
| RUN |2 NODE_ENV=production BUILD_VERSION=latest /bin/sh -c npm install -g @google/gemini-cli 2>/dev/null && which gemini && echo "✅ Gemini CLI installiert" || echo "⚠️ Gemini CLI nicht verfügbar" # buildkit |
| RUN |2 NODE_ENV=production BUILD_VERSION=latest /bin/sh -c npm install -g @openai/codex 2>/dev/null && which codex && echo "✅ Codex CLI installiert" || echo "⚠️ Codex CLI nicht verfügbar" # buildkit |
| RUN |2 NODE_ENV=production BUILD_VERSION=latest /bin/sh -c apk del python3 make g++ 2>/dev/null || true && npm cache clean --force && rm -rf /tmp/* /root/.npm # buildkit |
| RUN |2 NODE_ENV=production BUILD_VERSION=latest /bin/sh -c deluser node 2>/dev/null || true && delgroup node 2>/dev/null || true && addgroup -g 1000 appuser && adduser -D -u 1000 -G appuser -h /home/appuser appuser && mkdir -p /var/www/html /app/backend/dist /etc/supervisor.d /data /var/log/nginx /var/lib/nginx /var/tmp/nginx/client_body /var/tmp/nginx/proxy /var/tmp/nginx/fastcgi /var/tmp/nginx/uwsgi /var/tmp/nginx/scgi /run/nginx /tmp/ki_server /home/appuser/.claude /home/appuser/.gemini /home/appuser/.codex # buildkit |
| COPY /app/frontend/build /var/www/html # buildkit |
| COPY /app/backend/dist /app/backend/dist # buildkit |
| COPY /app/backend/node_modules /app/backend/node_modules # buildkit |
| COPY nginx.conf /etc/nginx/nginx.conf # buildkit |
| RUN |2 NODE_ENV=production BUILD_VERSION=latest /bin/sh -c printf '[supervisord]\nnodaemon=true\nloglevel=info\nlogfile=/dev/stdout\nlogfile_maxbytes=0\nuser=appuser\n\n[program:nginx]\ncommand=/usr/sbin/nginx -g "daemon off;"\nautorestart=true\nstartretries=5\nstdout_logfile=/dev/stdout\nstdout_logfile_maxbytes=0\nstderr_logfile=/dev/stderr\nstderr_logfile_maxbytes=0\npriority=10\nuser=appuser\n\n[program:backend]\ncommand=node /app/backend/dist/index.js\ndirectory=/app/backend\nenvironment=HOME="/home/appuser"\nautorestart=true\nstartretries=5\nstartsecs=5\nstdout_logfile=/dev/stdout\nstdout_logfile_maxbytes=0\nstderr_logfile=/dev/stderr\nstderr_logfile_maxbytes=0\npriority=20\nuser=appuser\n' > /etc/supervisor.d/supervisord.ini # buildkit |
| RUN |2 NODE_ENV=production BUILD_VERSION=latest /bin/sh -c printf '#!/bin/sh\nnginx_status=$(wget -q -O /dev/null http://localhost:8080/health 2>&1 && echo "ok" || echo "fail")\nbackend_status=$(wget -q -O /dev/null http://localhost:3001/api/health 2>&1 && echo "ok" || echo "fail")\nif [ "$nginx_status" = "ok" ] && [ "$backend_status" = "ok" ]; then\n exit 0\nelse\n echo "Health check failed: nginx=$nginx_status, backend=$backend_status"\n exit 1\nfi\n' > /usr/local/bin/healthcheck.sh && chmod +x /usr/local/bin/healthcheck.sh # buildkit |
| RUN |2 NODE_ENV=production BUILD_VERSION=latest /bin/sh -c chown -R appuser:appuser /data /app/backend /var/www/html /var/log/nginx /var/lib/nginx /var/tmp/nginx /run/nginx /etc/nginx /tmp/ki_server /home/appuser /usr/local/bin/healthcheck.sh # buildkit |
| HEALTHCHECK &{["CMD-SHELL" "/usr/local/bin/healthcheck.sh"] "30s" "15s" "1m0s" "0s" '\x03'} |
| WORKDIR /app/backend |
| EXPOSE [8080/tcp] |
| USER appuser |
| ENTRYPOINT ["/sbin/tini" "--"] |
| CMD ["/usr/bin/supervisord" "-c" "/etc/supervisor.d/supervisord.ini"] |
| LABEL maintainer=csnetworkx version=latest description=KI Server - LLM, Audio, Image API mit Claude/Gemini/Codex CLI org.opencontainers.image.source=https://github.com/csnetworkx/ki_server |
