Dockerfile

FROM rustlang/rust:nightly-alpine AS rust-chef
RUN apk add --no-cache curl ca-certificates
RUN curl -L --proto '=https' --tlsv1.2 -sSf https://raw.githubusercontent.com/cargo-bins/cargo-binstall/main/install-from-binstall-release.sh | sh
RUN cargo binstall cargo-chef --no-confirm 
WORKDIR /app

FROM rust-chef AS rust-planner 
COPY . .
RUN cargo chef prepare --recipe-path recipe.json

FROM rust-chef AS rust-builder
COPY --from=rust-planner /app/recipe.json recipe.json
RUN cargo chef cook --release --recipe-path recipe.json
COPY . .
RUN cargo build --release

FROM node:lts-alpine AS webui-builder
RUN npm install -g pnpm@10.30.3
ENV PNPM_HOME="/pnpm"
ENV PATH="$PNPM_HOME:$PATH"
WORKDIR /app
COPY . .
RUN --mount=type=cache,id=pnpm-store,target=/pnpm/store pnpm install --frozen-lockfile --ignore-scripts
RUN (cd apps/webui && pnpm run build)

FROM alpine AS runtime
RUN apk add --no-cache ca-certificates
WORKDIR /app
COPY --from=rust-builder /app/target/release/securitydept-server /app/securitydept-server
COPY --from=rust-builder /app/target/release/securitydept-cli /app/securitydept-cli
COPY --from=webui-builder /app/webui /app/webui
RUN mkdir /app/data
CMD ["/app/securitydept-server"]