Dockerfile.production

# syntax=docker/dockerfile:1
ARG BUILD_BASE_IMAGE=ghcr.io/opengovsg/formsg:build-latest
ARG RUNTIME_BASE_IMAGE=ghcr.io/opengovsg/formsg:runtime-latest

# node-modules-builder stage installs/compiles the node_modules folder
# Build stage: node_modules already present in base image — just copy source and build
FROM ${BUILD_BASE_IMAGE} AS build
ARG APP_VERSION=""
ARG DD_RUM_APP_ID=""
ARG DD_RUM_CLIENT_TOKEN=""
WORKDIR /build

COPY . ./

# These options are only used in the build stage, not the start stage.
ENV NODE_OPTIONS="--max-old-space-size=4096"

ENV VITE_APP_VERSION=$APP_VERSION
ENV VITE_APP_DD_RUM_APP_ID=$DD_RUM_APP_ID
ENV VITE_APP_DD_RUM_CLIENT_TOKEN=$DD_RUM_CLIENT_TOKEN
RUN pnpm build


# Final stage: runtime deps and user already in base image
FROM ${RUNTIME_BASE_IMAGE}
LABEL maintainer=FormSG<form@open.gov.sg>
WORKDIR /opt/formsg

# Copy the built frontend dist for the backend to serve
COPY --from=build /build/apps/frontend/dist /opt/formsg/apps/frontend/dist
# Copy the built formsg-shared package and package.json for the backend to resolve
COPY --from=build /build/packages/shared/package.json /opt/formsg/packages/shared/
COPY --from=build /build/packages/shared/node_modules /opt/formsg/packages/shared/node_modules
COPY --from=build /build/packages/shared/dist /opt/formsg/packages/shared/dist
# Copy the built formsg-sdk package for the backend to resolve
COPY --from=build /build/packages/sdk/package.json /opt/formsg/packages/sdk/
COPY --from=build /build/packages/sdk/node_modules /opt/formsg/packages/sdk/node_modules
COPY --from=build /build/packages/sdk/cjs-entry.cjs /opt/formsg/packages/sdk/
COPY --from=build /build/packages/sdk/dist /opt/formsg/packages/sdk/dist

# Copy required node_modules, package.json scripts and built backend dist for the backend start script to run
COPY --from=build /build/pnpm-workspace.yaml /opt/formsg/pnpm-workspace.yaml
COPY --from=build /build/node_modules /opt/formsg/node_modules
COPY --from=build /build/package.json /opt/formsg/package.json

COPY --from=build /build/apps/backend/node_modules /opt/formsg/apps/backend/node_modules
COPY --from=build /build/apps/backend/package.json /opt/formsg/apps/backend/package.json
COPY --from=build /build/apps/backend/dist /opt/formsg/apps/backend/dist

# Run as non-privileged user (pre-created in runtime-base)
USER formsguser

ENV NODE_ENV=production
EXPOSE 4545

# tini is the init process that will adopt orphaned zombie processes
# e.g. chromium when launched to create a new PDF
ENTRYPOINT [ "tini", "--" ]
CMD [ "pnpm", "start" ]