mirror of
https://github.com/stack-auth/stack.git
synced 2026-06-07 21:04:26 +08:00
bb277d33c9
- Added support for `@opentelemetry/sdk-node` in the backend. - Updated various dependencies including AWS SDK and OpenTelemetry packages. - Implemented graceful shutdown handling for non-Vercel runtimes in `prisma-client.tsx`. - Enhanced AWS credentials retrieval to support GCP Workload Identity Federation. - Introduced a Dockerfile for Cloud Run deployment, optimizing the backend build process. - Updated `.gitignore` to include Terraform runtime files and secrets. This commit improves the backend's observability and deployment flexibility, particularly for Cloud Run environments. <!-- Make sure you've read the CONTRIBUTING.md guidelines: https://github.com/stack-auth/stack-auth/blob/dev/CONTRIBUTING.md --> <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **New Features** * OpenTelemetry observability with dynamic provider selection per deployment. * Cloud Run trusted-proxy support for accurate client IP handling. * Graceful shutdown that waits for in-flight background work. * New background-task handling to improve async webhook/email delivery reliability. * AWS credential providers added (Vercel OIDC & GCP Workload Identity Federation). * Dockerized backend image for Cloud Run / self-host deployments. * **Chores** * Updated dependencies for OpenTelemetry and AWS SDK support. <!-- end of auto-generated comment: release notes by coderabbit.ai --> --------- Co-authored-by: Konstantin Wohlwend <n2d4xc@gmail.com>
87 lines
2.0 KiB
Docker
87 lines
2.0 KiB
Docker
# Backend for Cloud Run / self-hosted deployment (fallback backend server).
|
|
# Connects to the same AWS services (RDS, S3, KMS) as the Vercel deployment.
|
|
#
|
|
# Build: docker build -f docker/backend/Dockerfile -t stack-backend .
|
|
# Run: docker run -p 8102:8102 --env-file .env stack-backend
|
|
|
|
ARG NODE_VERSION=22.21.1
|
|
|
|
# Base
|
|
FROM node:${NODE_VERSION} AS base
|
|
|
|
WORKDIR /app
|
|
|
|
RUN apt-get update && \
|
|
apt-get upgrade -y && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
ENV PNPM_HOME=/pnpm
|
|
ENV PATH=$PNPM_HOME:$PATH
|
|
|
|
RUN corepack enable
|
|
RUN corepack prepare pnpm@10.23.0 --activate
|
|
RUN pnpm add -g turbo
|
|
RUN pnpm add -g tsx
|
|
|
|
|
|
# Prune stage
|
|
FROM base AS pruner
|
|
|
|
COPY . .
|
|
|
|
RUN tsx ./scripts/generate-sdks.ts
|
|
|
|
# Only prune backend (no dashboard)
|
|
RUN turbo prune --scope=@stackframe/backend --docker
|
|
|
|
|
|
# Build stage
|
|
FROM base AS builder
|
|
|
|
COPY --from=pruner /app/out/json/ .
|
|
COPY --from=pruner /app/out/pnpm-lock.yaml .
|
|
COPY .gitignore .
|
|
COPY pnpm-workspace.yaml .
|
|
COPY turbo.json .
|
|
COPY configs ./configs
|
|
RUN STACK_SKIP_TEMPLATE_GENERATION=true pnpm install --frozen-lockfile
|
|
|
|
COPY --from=pruner /app/out/full/ .
|
|
|
|
# Docs are required for the NextJS backend build
|
|
COPY docs ./docs
|
|
|
|
ENV NEXT_CONFIG_OUTPUT=standalone
|
|
|
|
# Build backend only
|
|
RUN pnpm turbo run docker-build --filter=@stackframe/backend...
|
|
|
|
|
|
# Final image
|
|
FROM node:${NODE_VERSION}-slim
|
|
|
|
WORKDIR /app
|
|
|
|
RUN apt-get update && \
|
|
apt-get upgrade -y && \
|
|
apt-get install -y --no-install-recommends openssl && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
# Copy Next.js standalone output — this includes a traced, minimal copy of
|
|
# node_modules/ and packages/ (only the files the server actually imports).
|
|
COPY --from=builder --chown=node:node /app/apps/backend/.next/standalone ./
|
|
COPY --from=builder --chown=node:node /app/apps/backend/.next/static ./apps/backend/.next/static
|
|
|
|
# Prisma schema (needed at runtime by Prisma client)
|
|
COPY --from=builder --chown=node:node /app/apps/backend/prisma ./apps/backend/prisma
|
|
|
|
ENV NODE_ENV=production
|
|
ENV PORT=8102
|
|
ENV HOSTNAME=0.0.0.0
|
|
|
|
USER node
|
|
|
|
EXPOSE 8102
|
|
|
|
CMD ["node", "apps/backend/server.js"]
|