Dockerfile

### Elixir Deps
FROM hexpm/elixir:1.17.3-erlang-27.1.2-alpine-3.20.3 AS elixir-deps

# git is needed to fetch some mix deps
RUN apk add --no-cache git

ENV MIX_ENV=prod
COPY ./mix.exs /app/mix.exs
COPY ./mix.lock /app/mix.lock
WORKDIR /app
RUN mix local.hex --force
RUN mix local.rebar --force
RUN mix deps.get --only-prod
RUN mix deps.compile


### Node Deps and Build Frontend
FROM node:22.11.0-alpine3.20 AS node

# npm deps
ENV NODE_ENV=production
COPY ./package.json /app/package.json
COPY ./package-lock.json /app/package-lock.json
WORKDIR /app
RUN npm ci

# build frontend
COPY --from=elixir-deps /app/deps /app/deps
COPY ./tsconfig.json /app/tsconfig.json
COPY ./tailwind.config.ts /app/tailwind.config.ts
COPY ./js /app/js
COPY ./css /app/css
COPY ./lib/orbit_web /app/lib/orbit_web
WORKDIR /app
# TODO make esbuild emit sourcemaps
RUN npm run build:js -- --minify
RUN npm run build:css -- --minify


### Build Backend
FROM elixir-deps AS elixir

COPY ./priv/static /app/priv/static
COPY --from=node /app/priv/static/assets /app/priv/static/assets
COPY ./priv/repo/migrations /app/priv/repo/migrations
COPY ./config /app/config
COPY ./lib /app/lib
WORKDIR /app
ARG RELEASE
ENV RELEASE=${RELEASE}
RUN mix sentry.package_source_code
RUN mix compile
RUN mix phx.digest
RUN mix release --path /app-release


### Production Stage
# Run in minimal Alpine container
FROM alpine:3.20.3 AS runtime

# HTTP port
EXPOSE 4001

# Erlang depends on these
RUN apk add --no-cache ncurses-libs libstdc++ libgcc

# Fetch Amazon RDS certificate chain
RUN wget -O /usr/local/share/amazon-certs.pem https://truststore.pki.rds.amazonaws.com/global/global-bundle.pem
RUN chmod a=r /usr/local/share/amazon-certs.pem

# Run as unprivileged user in production
RUN addgroup -S orbit && adduser -S -G orbit orbit
USER orbit
WORKDIR /home/orbit

# Run properly in production
ENV PORT=4001 MIX_ENV=prod TERM=xterm LANG="C.UTF-8"
COPY --from=elixir --chown=orbit:orbit /app-release .
CMD ["bin/orbit", "start"]