spiff-arena/spiffworkflow-frontend/Dockerfile

# Base image to share ENV vars that activate VENV.
FROM node:20.8.1-bookworm-slim AS base

RUN mkdir /app

WORKDIR /app

# curl for debugging
# procps for debugging
# vim ftw
RUN apt-get update \
 && apt-get clean -y \
 && apt-get install -y -q \
 curl \
 procps \
 vim-tiny \
 && rm -rf /var/lib/apt/lists/*

# this matches total memory on spiffworkflow-demo
ENV NODE_OPTIONS=--max_old_space_size=2048


######################## - SETUP

# Setup image for installing JS dependencies.
FROM base AS setup

COPY . /app/

RUN cp /app/package.json /app/package.json.bak
ADD justservewebserver.package.json /app/package.json
RUN npm ci --ignore-scripts
RUN cp -r /app/node_modules /app/node_modules.justserve
RUN cp /app/package.json.bak /app/package.json

# npm ci because it respects the lock file.
# --ignore-scripts because authors can do bad things in postinstall scripts.
# https://cheatsheetseries.owasp.org/cheatsheets/NPM_Security_Cheat_Sheet.html
# npx can-i-ignore-scripts can check that it's safe to ignore scripts.
RUN npm ci --ignore-scripts

RUN ./bin/build


######################## - FINAL

# Final image without setup dependencies.
FROM base AS final

LABEL description="Frontend component of SpiffWorkflow, a software development platform for building, running, and monitoring executable diagrams"

# WARNING: On localhost frontend assumes backend is one port lower.
ENV PORT0=7001

COPY --from=setup /app/build /app/build
COPY --from=setup /app/bin /app/bin
COPY --from=setup /app/node_modules.justserve /app/node_modules

RUN chown -R node:node /app

USER node
CMD ["/app/bin/boot_server_in_docker"]