Dockerfile

ARG RUBY_VERSION=4.0.5
FROM ruby:$RUBY_VERSION-alpine AS base

WORKDIR /rails

ENV RAILS_ENV=production \
    BUNDLE_DEPLOYMENT=1 \
    BUNDLE_PATH=/usr/local/bundle \
    BUNDLE_WITHOUT="development:test" \
    WORKDIR=/data/progresswatch

# Both database libraries: DATABASE_URL picks the adapter at boot, so neither can
# be dropped as bloat.
RUN apk add --no-cache sqlite-libs libpq tzdata redis

# Assets are built in their own stage so Node never reaches the final image.
FROM node:22-alpine AS assets

WORKDIR /rails

RUN apk add --no-cache python3 build-base

COPY package.json package-lock.json ./
RUN npm ci

COPY postcss.config.js tailwind.config.js ./
COPY config/shakapacker.yml ./config/shakapacker.yml
COPY config/webpack ./config/webpack
COPY app/javascript ./app/javascript
COPY app/views ./app/views

# Tailwind scans app/views and app/javascript for the classes it keeps, which is why
# both are copied above. Shakapacker is driven directly rather than through
# bin/shakapacker, so this stage needs no Ruby.
RUN NODE_ENV=production npx webpack --config config/webpack/webpack.config.js

FROM base AS build

RUN apk add --no-cache build-base git pkgconf sqlite-dev postgresql-dev yaml-dev

COPY Gemfile Gemfile.lock ./

# Gems ship their own tests, docs and C sources, and none of that survives into a
# running container usefully.
RUN bundle install && \
    rm -rf ~/.bundle "${BUNDLE_PATH}"/cache "${BUNDLE_PATH}"/ruby/*/cache && \
    ruby -e "puts Dir['${BUNDLE_PATH}/ruby/*/gems/*/{test,tests,spec,examples,sample,misc,doc,docs,rdoc}'] + \
                  Dir['${BUNDLE_PATH}/ruby/*/gems/*/ext/**/*.{c,h,o,S}']" | xargs rm -rf && \
    bundle exec bootsnap precompile -j 1 --gemfile

COPY . .
COPY --from=assets /rails/public/packs ./public/packs
RUN bundle exec bootsnap precompile -j 1 app/ lib/

FROM base

COPY --from=build "${BUNDLE_PATH}" "${BUNDLE_PATH}"
COPY --from=build /rails /rails

RUN addgroup -g 1000 -S rails && \
    adduser -u 1000 -G rails -S -h /home/rails rails && \
    mkdir -p storage tmp "$WORKDIR" && \
    chown -R rails:rails db storage tmp /data
USER 1000:1000

ENTRYPOINT ["/rails/bin/docker-entrypoint"]

EXPOSE 3000
CMD ["bundle", "exec", "puma", "-C", "config/puma.rb"]