Merge pull request 'fix: Run prisma db push as root, then switch to nextjs user for app' (#15) from develop into main

Reviewed-on: #15

Dockerfile

@@ -39,6 +39,9 @@ ENV NODE_ENV=production
 RUN apt-get update && apt-get install -y --no-install-recommends \
     openssl \
     && rm -rf /var/lib/apt/lists/* \
+    && groupadd --system --gid 1001 nodejs \
+    && useradd --system --uid 1001 nextjs \
+    && mkdir -p /home/nextjs && chown nextjs:nextjs /home/nextjs \
     && apt-get clean && rm -rf /var/lib/apt/lists/*
 
 COPY --from=builder /app/public ./public
@@ -53,12 +56,15 @@ COPY --from=builder /app/prisma/schema.prisma /app/schema.prisma
 COPY docker-entrypoint.sh /usr/local/bin/
 RUN chmod +x /usr/local/bin/docker-entrypoint.sh
 
+# Create data directory with proper permissions
+RUN mkdir -p /app/data && chown -R nextjs:nextjs /app
+
 EXPOSE 3000
 
 ENV PORT=3000
 ENV HOSTNAME="0.0.0.0"
-ENV DATABASE_URL="file:/app/data/dev.db"
+ENV DATABASE_URL="file:./data/dev.db"
+ENV HOME=/home/nextjs
 
 ENTRYPOINT ["/usr/local/bin/docker-entrypoint.sh"]
 CMD ["node", "server.js"]
-

Jenkinsfile

@@ -85,13 +85,13 @@ services:
         - "traefik.http.routers.${NAME_SERVICE}.rule=Host(`recall.vodorod.cl`)"
     environment:
       - TZ=America/Santiago
-      - DATABASE_URL=file:/app/data/dev.db
+      - DATABASE_URL=file:./data/dev.db
     volumes:
         - ./data:/app/data
     networks:
       - homelab-net
-    mem_limit: 512m
-    mem_reservation: 256m
+    mem_limit: 32m
+    mem_reservation: 16m
     restart: unless-stopped
 networks:
   homelab-net:

README.md

@@ -248,7 +248,3 @@ src/
 └── types/
     └── note.ts
 ```
-
-
-
-nueva prueba

docker-compose.yml

@@ -8,5 +8,5 @@ services:
     volumes:
       - ./data:/app/data
     environment:
-      - DATABASE_URL=file:/app/data/dev.db
+      - DATABASE_URL=file:./data/dev.db
     restart: unless-stopped

docker-entrypoint.sh

@@ -1,25 +1,14 @@
 #!/bin/bash
 set -e
 
-cd /app
-
+# Initialize database if it doesn't exist or schema changed
 echo "Checking database..."
 
 # Ensure data directory exists with proper permissions
 mkdir -p /app/data
-chmod 777 /app/data
 
-# Run db push (creates/updates database schema)
-# If it fails due to OOM but DB exists, continue anyway
-./node_modules/prisma/build/index.js db push --skip-generate || {
-    exit_code=$?
-    if [ -f /app/data/dev.db ]; then
-        echo "db push failed (code $exit_code) but database exists, continuing..."
-    else
-        echo "db push failed and database does not exist"
-        exit $exit_code
-    fi
-}
+# Use local prisma version from node_modules
+./node_modules/prisma/build/index.js db push
 
 echo "Starting application..."
-exec "$@"
+exec su nextjs -c "cd /app && node server.js"