Dockerfile

#
# Build webapp and jipt deps
#
FROM node:21.6.1-bullseye-slim AS webapp-builder
RUN apt-get update -y && \
    apt-get install -y build-essential git python3 python3-pip && \
    apt-get clean && \
    rm -f /var/lib/apt/lists/*_*
WORKDIR /opt/build
COPY webapp .
RUN npm ci --no-audit --no-color && \
    npm run build-production

FROM node:21.6.1-bullseye-slim AS jipt-builder
RUN apt-get update -y && \
    apt-get install -y build-essential git python3 python3-pip && \
    apt-get clean && \
    rm -f /var/lib/apt/lists/*_*
WORKDIR /opt/build
COPY jipt .
RUN npm ci --no-audit --no-color && \
    npm run build-production

#
# Build the OTP binary
#
FROM hexpm/elixir:1.17.2-erlang-25.0.4-debian-bullseye-20240722-slim AS builder

ENV MIX_ENV=prod

WORKDIR /build

# Install Debian dependencies
RUN apt-get update -y && \
    apt-get install -y build-essential git libyaml-dev default-jre && \
    apt-get clean && \
    rm -f /var/lib/apt/lists/*_*

COPY priv priv

RUN mix local.rebar --force && \
    mix local.hex --force

COPY mix.* ./
COPY config config

RUN mix deps.get --only prod
RUN mix deps.compile --only prod

COPY vendor/language_tool/priv/ vendor/language_tool/priv/
RUN cd ./vendor/language_tool/priv/native/languagetool && ./gradlew shadowJar
RUN cp ./vendor/language_tool/priv/native/languagetool/app/build/libs/language-tool.jar priv/native/language-tool.jar

COPY vendor vendor
COPY lib lib

RUN mix compile --only prod

# Move static assets from other stages into the OTP release.
# Those file will be served by the Elixir app.
COPY --from=webapp-builder /opt/build/webapp-dist ./webapp-dist
COPY --from=jipt-builder /opt/build/jipt-dist ./jipt-dist

RUN mv webapp-dist priv/static/webapp && \
    mv jipt-dist priv/static/jipt

RUN mkdir -p /opt/build && \
    mix release && \
    cp -R _build/prod/rel/accent/* /opt/build

#
# Build a lean runtime container
#
FROM debian:bullseye-20240722

RUN apt-get update -y && \
    apt-get install -y default-jre bash libyaml-dev openssl libncurses5 locales fontconfig hunspell hunspell-fr hunspell-en-ca hunspell-en-us hunspell-es && \
    apt-get clean && \
    rm -f /var/lib/apt/lists/*_*

# Set the locale
RUN sed -i '/en_US.UTF-8/s/^# //g' /etc/locale.gen && locale-gen

ENV MIX_ENV="prod"
ENV LANG en_US.UTF-8
ENV LANGUAGE en_US:en
ENV LC_ALL en_US.UTF-8

WORKDIR /opt/accent

# Create a non-root user
RUN chown nobody /opt/accent

COPY --from=builder --chown=nobody:root /opt/build .

# Copy the entrypoint script
COPY priv/scripts/docker-entrypoint.sh /usr/local/bin
RUN chmod a+x /usr/local/bin/docker-entrypoint.sh

USER nobody

ENTRYPOINT ["docker-entrypoint.sh"]
CMD ["start"]