init

Dockerfile

@@ -0,0 +1,32 @@
+# ---- Build stage -----------------------------------------------------
+FROM node:22-alpine AS build
+
+WORKDIR /app
+
+# Backend URLs are baked in at build time (Vite inlines VITE_* variables).
+ARG VITE_API_BASE=https://localhost:3000
+ARG VITE_WS_BASE
+ENV VITE_API_BASE=$VITE_API_BASE
+ENV VITE_WS_BASE=$VITE_WS_BASE
+
+COPY package*.json ./
+RUN npm install
+
+COPY . .
+RUN npm run build
+
+# ---- Runtime stage ---------------------------------------------------
+FROM nginx:1.27-alpine AS runtime
+
+# openssl is needed to generate the self-signed certificate on first start.
+RUN apk add --no-cache openssl
+
+COPY nginx.conf /etc/nginx/conf.d/default.conf
+COPY docker/40-self-signed-ssl.sh /docker-entrypoint.d/40-self-signed-ssl.sh
+RUN chmod +x /docker-entrypoint.d/40-self-signed-ssl.sh
+
+COPY --from=build /app/dist /usr/share/nginx/html
+
+EXPOSE 443
+
+# The base nginx image entrypoint runs every script in /docker-entrypoint.d.