mirror of
https://github.com/plausible/analytics.git
synced 2024-11-23 03:04:43 +03:00
ecb552479f
* Dockerfile: pin elixir-1.14.3, erlang-25.2.3, alpine-3.17.0
* asdf: pin erlang 25.2.3, elixir 1.14.3-otp-25
* Remove nonsense
* Remove erlang dupe
* Remove erlang, it's in the base image already
* Remove empty file
* Truncate seconds in NaiveDateTime instances
* Bump cache key
* Mitigate Error:error:0308010C:digital envelope routines::unsupported
See: https://www.newline.co/@kchan/how-to-fix-the-error-errorerror0308010cdigital-envelope-routinesunsupported--0f8d3f17
* Upgrade to latest alpine image and pin to an exact digest
* Revert "Upgrade to latest alpine image and pin to an exact digest"
This reverts commit cdf6624efa.
* Pin alpine image to an exact digest
---------
Co-authored-by: Cenk Kücük <c@cenk.me>
75 lines
1.9 KiB
Docker
75 lines
1.9 KiB
Docker
# we can not use the pre-built tar because the distribution is
|
|
# platform specific, it makes sense to build it in the docker
|
|
|
|
#### Builder
|
|
FROM hexpm/elixir:1.14.3-erlang-25.2.3-alpine-3.17.0 as buildcontainer
|
|
|
|
# preparation
|
|
ENV MIX_ENV=prod
|
|
ENV NODE_ENV=production
|
|
ENV NODE_OPTIONS=--openssl-legacy-provider
|
|
|
|
RUN mkdir /app
|
|
WORKDIR /app
|
|
|
|
# install build dependencies
|
|
RUN apk add --no-cache git nodejs yarn python3 npm ca-certificates wget gnupg make gcc libc-dev && \
|
|
npm install npm@latest -g && \
|
|
npm install -g webpack
|
|
|
|
COPY mix.exs ./
|
|
COPY mix.lock ./
|
|
COPY config ./config
|
|
RUN mix local.hex --force && \
|
|
mix local.rebar --force && \
|
|
mix deps.get --only prod && \
|
|
mix deps.compile
|
|
|
|
COPY assets/package.json assets/package-lock.json ./assets/
|
|
COPY tracker/package.json tracker/package-lock.json ./tracker/
|
|
|
|
RUN npm install --prefix ./assets && \
|
|
npm install --prefix ./tracker
|
|
|
|
COPY assets ./assets
|
|
COPY tracker ./tracker
|
|
COPY priv ./priv
|
|
COPY lib ./lib
|
|
|
|
RUN npm run deploy --prefix ./assets && \
|
|
npm run deploy --prefix ./tracker && \
|
|
mix phx.digest priv/static && \
|
|
mix download_country_database && \
|
|
# https://hexdocs.pm/sentry/Sentry.Sources.html#module-source-code-storage
|
|
mix sentry_recompile
|
|
|
|
WORKDIR /app
|
|
COPY rel rel
|
|
RUN mix release plausible
|
|
|
|
# Main Docker Image
|
|
FROM alpine:3.17.0@sha256:c0d488a800e4127c334ad20d61d7bc21b4097540327217dfab52262adc02380c
|
|
LABEL maintainer="plausible.io <hello@plausible.io>"
|
|
|
|
ARG BUILD_METADATA={}
|
|
ENV BUILD_METADATA=$BUILD_METADATA
|
|
ENV LANG=C.UTF-8
|
|
|
|
RUN apk upgrade --no-cache
|
|
|
|
RUN apk add --no-cache openssl ncurses libstdc++ libgcc ca-certificates
|
|
|
|
COPY ./rel/docker-entrypoint.sh /entrypoint.sh
|
|
|
|
RUN chmod a+x /entrypoint.sh && \
|
|
adduser -h /app -u 1000 -s /bin/sh -D plausibleuser
|
|
|
|
COPY --from=buildcontainer /app/_build/prod/rel/plausible /app
|
|
RUN chown -R plausibleuser:plausibleuser /app
|
|
USER plausibleuser
|
|
WORKDIR /app
|
|
ENV LISTEN_IP=0.0.0.0
|
|
ENTRYPOINT ["/entrypoint.sh"]
|
|
EXPOSE 8000
|
|
CMD ["run"]
|