Phase 3: replace docker image with notes-app + file-api bundle (#8)

The image now ships the post-Logseq stack: notes-app SPA served by
nginx, file-api sidecar on 127.0.0.1:3000, /brain mount for
markdown persistence. Pulls back from the upstream-Logseq build
that the image was inheriting.

Multi-stage Dockerfile:
- notes-app-builder: pnpm install + vite build -> dist
- file-api-builder: pnpm install --prod -> node_modules + src
- runtime (node:22-alpine + nginx + tini): SPA at
  /usr/share/nginx/html, file-api at /opt/file-api, started by
  /entrypoint.sh

docker/nginx.conf:
- /api/ proxied to 127.0.0.1:3000 with HTTP/1.1, no buffering, and
  24h read timeout so /api/watch SSE streams stay alive
- SPA fallback: try_files $uri $uri/ /index.html for hash routing
- client_max_body_size 25M to match file-api's MAX_BODY_BYTES default

docker/entrypoint.sh:
- mkdir -p $BRAIN_DIR (default /brain)
- start file-api in background; trap TERM/INT to forward shutdown
- poll /api/health for up to 5s before starting nginx so the first
  request doesn't 502
- exec nginx in foreground so PID 1 (tini) reaps it correctly

.dockerignore: scope context to docker/ + packages/notes-app +
packages/file-api; exclude all upstream-Logseq dirs and node_modules
trees. Build context is ~1.5 MB.

.gitignore: drop the bare 'docker' rule inherited from upstream so
the new docker/ directory at the repo root is tracked.

HEALTHCHECK: hit /api/health every 30s.

VOLUME ["/brain"], EXPOSE 80. Run with:
  docker run -v /host/brain:/brain -p 8080:80 \
    ghcr.io/kelsi-bizer/bizeros-knowledge:latest

Co-authored-by: Claude <noreply@anthropic.com>

Author: kelsi-bizer

.dockerignore

@@ -1,15 +1,35 @@
+# Keep the docker build context lean. Only packages/notes-app, packages/file-api,
+# and docker/ are needed to build the BizerOS Knowledge image.
+
 .git
 .github
-node_modules
+*.log
+.DS_Store
+
+# Build outputs and dependency dirs that should never be sent.
 **/node_modules
-static
-public
-dist
-ios
+**/dist
+**/.parcel-cache
+**/.vite
+**/*.tsbuildinfo
+
+# Upstream-Logseq directories the new image does not consume.
 android
+ios
 fastlane
 docs
+src
+deps
+scripts
+icons
+resources
+public
+static
+prompts
 clj-e2e
 cli-e2e
-*.log
-.DS_Store
+externs
+externs.js
+ssl
+libs
+bin

.gitignore

@@ -47,7 +47,6 @@ charlie/
 .vscode
 /.claude
 /.preprocessor-cljs
-docker
 android/app/src/main/assets/capacitor.plugin.json
 ios/App/App/capacitor.config.json
 ios/App/App/public

Dockerfile

@@ -1,34 +1,51 @@
-# Builds the BizerOS Knowledge web app image from this repository's source.
-# The build context is the repo root, so the rebranded sources are baked into
-# the resulting image rather than being re-cloned from upstream Logseq.
+# BizerOS Knowledge — multi-stage build.
+# Final image runs nginx (serving the notes-app SPA) and a file-api sidecar
+# (persisting markdown to $BRAIN_DIR, default /brain).
 
-# Builder image
-FROM clojure:temurin-11-tools-deps-1.11.1.1208-bullseye-slim as builder
+# ── Stage 1: build the notes-app SPA ─────────────────────────────────────────
+FROM node:22-alpine AS notes-app-builder
+WORKDIR /build
+RUN corepack enable && corepack prepare pnpm@10.33.0 --activate
 
-ARG DEBIAN_FRONTEND=noninteractive
+COPY packages/notes-app/package.json packages/notes-app/pnpm-lock.yaml ./
+RUN pnpm install --frozen-lockfile
 
-# Install reqs
-RUN apt-get update && apt-get install -y --no-install-recommends \
-    curl \
-    ca-certificates \
-    apt-transport-https \
-    gpg \
-    build-essential libcairo2-dev libpango1.0-dev libjpeg-dev libgif-dev librsvg2-dev
+COPY packages/notes-app/ ./
+RUN pnpm build
 
-# install NodeJS & pnpm
-RUN curl -fsSL https://deb.nodesource.com/setup_24.x | bash - && \
-    apt-get update && apt-get install -y nodejs && \
-    corepack enable && corepack prepare pnpm@10.33.0 --activate
+# ── Stage 2: install the file-api runtime ────────────────────────────────────
+FROM node:22-alpine AS file-api-builder
+WORKDIR /build
+RUN corepack enable && corepack prepare pnpm@10.33.0 --activate
 
-WORKDIR /data
+COPY packages/file-api/package.json packages/file-api/pnpm-lock.yaml ./
+RUN pnpm install --frozen-lockfile --prod
+COPY packages/file-api/src ./src
 
-COPY . /data
+# ── Stage 3: runtime ─────────────────────────────────────────────────────────
+FROM node:22-alpine
 
-RUN pnpm install --config.network-timeout=240000
+# nginx is the front door; tini reaps zombies and forwards signals.
+RUN apk add --no-cache nginx tini
 
-RUN pnpm release
+# SPA bundle.
+COPY --from=notes-app-builder /build/dist /usr/share/nginx/html
 
-# Web App Runner image
-FROM nginx:1.24.0-alpine3.17
+# File-api source + node_modules.
+COPY --from=file-api-builder /build /opt/file-api
 
-COPY --from=builder /data/static /usr/share/nginx/html
+# nginx + entrypoint configuration.
+COPY docker/nginx.conf /etc/nginx/http.d/default.conf
+COPY docker/entrypoint.sh /entrypoint.sh
+RUN chmod +x /entrypoint.sh
+
+# /brain is the markdown persistence root. Mount a host volume here.
+ENV BRAIN_DIR=/brain
+VOLUME ["/brain"]
+
+EXPOSE 80
+
+HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
+    CMD wget --quiet --tries=1 --spider http://127.0.0.1/api/health || exit 1
+
+ENTRYPOINT ["/sbin/tini", "--", "/entrypoint.sh"]

docker/entrypoint.sh

@@ -0,0 +1,40 @@
+#!/bin/sh
+# BizerOS Knowledge container entrypoint.
+# Runs the file-api sidecar in the background and nginx in the foreground.
+
+set -eu
+
+BRAIN_DIR="${BRAIN_DIR:-/brain}"
+mkdir -p "$BRAIN_DIR"
+
+export BRAIN_DIR
+export HOST="${HOST:-127.0.0.1}"
+export PORT="${PORT:-3000}"
+export LOG_LEVEL="${LOG_LEVEL:-info}"
+
+echo "[entrypoint] BRAIN_DIR=$BRAIN_DIR" >&2
+echo "[entrypoint] starting file-api on ${HOST}:${PORT}" >&2
+
+node /opt/file-api/src/server.js &
+FILE_API_PID=$!
+
+# Forward shutdown signals to the file-api before exiting.
+trap 'kill -TERM "$FILE_API_PID" 2>/dev/null || true; wait "$FILE_API_PID" 2>/dev/null || true; exit 0' TERM INT
+
+# Wait briefly for the file-api to be ready so nginx doesn't 502 on first hit.
+i=0
+while [ "$i" -lt 20 ]; do
+    if wget -q --spider "http://${HOST}:${PORT}/api/health" 2>/dev/null; then
+        echo "[entrypoint] file-api ready" >&2
+        break
+    fi
+    i=$((i + 1))
+    sleep 0.25
+done
+
+if [ "$i" -ge 20 ]; then
+    echo "[entrypoint] WARNING: file-api did not respond within 5s — nginx will start anyway" >&2
+fi
+
+echo "[entrypoint] starting nginx" >&2
+exec nginx -g 'daemon off;'

docker/nginx.conf

@@ -0,0 +1,32 @@
+server {
+    listen 80;
+    listen [::]:80;
+    server_name _;
+
+    root /usr/share/nginx/html;
+    index index.html;
+
+    # Match file-api's default MAX_BODY_BYTES (25 MB).
+    client_max_body_size 25M;
+
+    # /api/* is served by the file-api sidecar on 127.0.0.1:3000.
+    # SSE-friendly: HTTP/1.1, no buffering, long read timeout.
+    location /api/ {
+        proxy_pass http://127.0.0.1:3000;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+
+        proxy_buffering off;
+        proxy_cache off;
+        proxy_set_header Connection '';
+        proxy_read_timeout 24h;
+        proxy_send_timeout 24h;
+    }
+
+    # Hash-routed SPA: any unknown path falls back to index.html.
+    location / {
+        try_files $uri $uri/ /index.html;
+    }
+}