From 4246d58798e1b740f9d2b99f58600371b44b6eb8 Mon Sep 17 00:00:00 2001 From: saravanakumardb1 Date: Mon, 13 Apr 2026 09:59:36 -0700 Subject: [PATCH] fix(docker): switch Alpine to Debian slim and remove prod NODE_TLS_REJECT_UNAUTHORIZED MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Alpine breaks under corporate proxy TLS interception. Debian slim works reliably. NODE_TLS_REJECT_UNAUTHORIZED=0 removed from production stages — only kept in build stages where npm registries need it. --- backend/Dockerfile | 5 ++--- web/Dockerfile | 5 ++--- 2 files changed, 4 insertions(+), 6 deletions(-) diff --git a/backend/Dockerfile b/backend/Dockerfile index a7f77e8..5016dd1 100644 --- a/backend/Dockerfile +++ b/backend/Dockerfile @@ -1,4 +1,4 @@ -FROM node:22-alpine AS builder +FROM node:22-slim AS builder WORKDIR /app/backend ARG GITEA_NPM_HOST @@ -21,10 +21,9 @@ COPY shared/ ../shared/ RUN pnpm run build # Production stage -FROM node:22-alpine +FROM node:22-slim WORKDIR /app/backend ENV NODE_ENV=production -ENV NODE_TLS_REJECT_UNAUTHORIZED=0 COPY --from=builder /app/backend/node_modules ./node_modules COPY --from=builder /app/backend/package.json ./package.json diff --git a/web/Dockerfile b/web/Dockerfile index 864717e..3401e50 100644 --- a/web/Dockerfile +++ b/web/Dockerfile @@ -1,4 +1,4 @@ -FROM node:22-alpine AS builder +FROM node:22-slim AS builder WORKDIR /app/web ARG GITEA_NPM_HOST @@ -28,11 +28,10 @@ ENV NEXT_PUBLIC_PLATFORM_SERVICE_URL=$NEXT_PUBLIC_PLATFORM_SERVICE_URL ENV NEXT_TELEMETRY_DISABLED=1 RUN pnpm run build -FROM node:22-alpine +FROM node:22-slim WORKDIR /app/web ENV NODE_ENV=production ENV NEXT_TELEMETRY_DISABLED=1 -ENV NODE_TLS_REJECT_UNAUTHORIZED=0 COPY --from=builder /app/web/.next/standalone ./ COPY --from=builder /app/web/.next/static ./.next/static