Dockerfile

# syntax=docker/dockerfile:1

# ---------------------------------------------------------------- dependencias
FROM node:24-alpine AS deps
WORKDIR /app
COPY package.json package-lock.json ./
RUN npm ci

# ---------------------------------------------------------------------- build
FROM node:24-alpine AS builder
WORKDIR /app
ENV NEXT_TELEMETRY_DISABLED=1
COPY --from=deps /app/node_modules ./node_modules
COPY . .
# `npm run build` ya corre `prisma generate` antes de `next build`.
# DATABASE_URL no se usa en build time, pero Prisma la valida: valor dummy.
ENV DATABASE_URL="postgresql://build:build@localhost:5432/build"
ENV AUTH_SECRET="build-time-placeholder-secret-value"
RUN npm run build

# --------------------------------------------------------------- dependencias
# de producción (incluye el CLI de Prisma para correr las migraciones al arrancar)
FROM node:24-alpine AS prod-deps
WORKDIR /app
COPY package.json package-lock.json ./
RUN npm ci --omit=dev

# ---------------------------------------------------------------------- runner
FROM node:24-alpine AS runner
WORKDIR /app

ENV NODE_ENV=production
ENV NEXT_TELEMETRY_DISABLED=1
ENV PORT=3000
ENV HOSTNAME=0.0.0.0

# Las fechas se formatean en el servidor. Sin TZ el contenedor corre en UTC y
# un gasto cargado de noche aparecería con la fecha del día siguiente.
# Se puede pisar con la variable TZ al levantar el contenedor.
# Node resuelve TZ con su propia base de zonas; tzdata es para que el sistema
# (logs, `date`) quede en la misma hora.
RUN apk add --no-cache tzdata
ENV TZ=America/Argentina/Buenos_Aires

RUN addgroup -S -g 1001 nodejs && adduser -S -u 1001 -G nodejs nextjs

COPY --from=prod-deps --chown=nextjs:nodejs /app/node_modules ./node_modules
COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
COPY --from=builder --chown=nextjs:nodejs /app/lib/generated ./lib/generated
COPY --chown=nextjs:nodejs prisma ./prisma
COPY --chown=nextjs:nodejs prisma.config.ts package.json docker-entrypoint.sh ./

RUN chmod +x docker-entrypoint.sh

USER nextjs
EXPOSE 3000

HEALTHCHECK --interval=30s --timeout=5s --start-period=20s --retries=3 \
  CMD node -e "fetch('http://127.0.0.1:3000/api/salud').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"

ENTRYPOINT ["./docker-entrypoint.sh"]