app/Dockerfile

# gitzone dockerfile_service
## STAGE 1 // BUILD
FROM code.foss.global/host.today/ht-docker-node:lts AS build

WORKDIR /app

COPY package.json pnpm-lock.yaml ./
RUN pnpm config set registry https://verdaccio.lossless.digital/
RUN pnpm config set store-dir .pnpm-store
RUN pnpm install --frozen-lockfile

COPY . ./
RUN pnpm run build
RUN pnpm prune --prod
RUN rm -rf .pnpm-store

## STAGE 2 // PRODUCTION
FROM code.foss.global/host.today/ht-docker-node:alpine-node AS production

WORKDIR /app

ENV NODE_ENV=production

COPY --from=build /app /app

# Rebuild native modules such as argon2 against Alpine libc.
RUN pnpm rebuild -r

LABEL org.opencontainers.image.title="idp.global" \
      org.opencontainers.image.description="Identity provider server, web UI, OIDC provider, MFA, and passkey runtime" \
      org.opencontainers.image.source="https://code.foss.global/idp.global/app"

EXPOSE 2999
CMD ["node", "cli.js"]