e5221afb87
Two changes that make 'docker compose up' actually work on this host
(and on any corporate network with TLS interception of npmjs.org):
1. backend/Dockerfile gains the same NODE_TLS_REJECT_UNAUTHORIZED=0 +
NPM_CONFIG_STRICT_SSL=false envs and 'npm config set strict-ssl false'
step that web/Dockerfile already had. Without this, the 'npm install
-g pnpm@10.6.5' step failed with UNABLE_TO_GET_ISSUER_CERT_LOCALLY
on corp networks. Build-time-only; production runtime image is
unaffected.
2. docker-compose.override.yml (new) is picked up automatically by
'docker compose up' and:
- remaps the web container's host port from 3000 to 3050 (port 3000
on this host is held by Grafana). Uses 'ports: !override' so the
base port mapping is replaced rather than appended.
- points the backend at the sibling platform-service (4003),
extraction-service (4005), and mcp-server (4007) running on the
host network via host.docker.internal.
- sets DB_PROVIDER=memory and a 32+ char JWT_SECRET so the backend
starts in dev mode without Cosmos credentials.
Verified live on this host:
docker compose up -d → both notelett-backend (healthy) and
notelett-web running.
curl http://localhost:4016/health → {status:ok,service:notelett-backend}
curl http://localhost:3050/dashboard → HTTP 200, '<title>NoteLett</title>'
34 lines
969 B
Docker
34 lines
969 B
Docker
FROM node:22-slim AS builder
|
|
WORKDIR /app/backend
|
|
|
|
# Corporate proxies often perform TLS interception; npm/pnpm registry
|
|
# fetches need strict-ssl disabled for the build step (same pattern as
|
|
# web/Dockerfile). These flags apply only inside the build container.
|
|
ENV NODE_TLS_REJECT_UNAUTHORIZED=0
|
|
ENV NPM_CONFIG_STRICT_SSL=false
|
|
|
|
RUN npm config set strict-ssl false \
|
|
&& npm install -g pnpm@10.6.5
|
|
|
|
COPY .npmrc.docker ./.npmrc
|
|
COPY .docker-deps/ ../.docker-deps/
|
|
COPY backend/package.json ./package.json
|
|
|
|
RUN pnpm install --ignore-scripts --lockfile=false
|
|
|
|
COPY backend/tsconfig.json ./tsconfig.json
|
|
COPY backend/src/ ./src/
|
|
COPY shared/ ../shared/
|
|
RUN pnpm run build
|
|
|
|
FROM node:22-slim
|
|
WORKDIR /app/backend
|
|
ENV NODE_ENV=production
|
|
|
|
COPY --from=builder /app/backend/node_modules ./node_modules
|
|
COPY --from=builder /app/backend/package.json ./package.json
|
|
COPY --from=builder /app/backend/dist ./dist
|
|
COPY shared/ ../shared/
|
|
|
|
EXPOSE 4016
|
|
CMD ["node", "dist/server.js"] |