FROM node:8-stretch
+# Allow to pass extra options to the npm run build
+# eg: --light --light-fr to not build all client languages
+# (speed up build time if i18n is not required)
+ARG NPM_RUN_BUILD_OPTS
+
+RUN set -ex; \
+ if ! command -v gpg > /dev/null; then \
+ apt update; \
+ apt install -y --no-install-recommends \
+ gnupg \
+ dirmngr \
+ ; \
+ rm -rf /var/lib/apt/lists/*; \
+fi
+
# Install dependencies
-RUN apt-get update \
- && apt-get -y install ffmpeg \
- && rm /var/lib/apt/lists/* -fR
+RUN apt update \
+ && apt -y install ffmpeg \
+ && rm /var/lib/apt/lists/* -fR
-# Install the application
-WORKDIR /app
+# Add peertube user
+RUN groupadd -r peertube \
+ && useradd -r -g peertube -m peertube
+# grab gosu for easy step-down from root
+RUN set -eux; \
+ apt update; \
+ apt install -y gosu; \
+ rm -rf /var/lib/apt/lists/*; \
+ gosu nobody true
+
+# Install PeerTube
+WORKDIR /app
COPY . ./
-RUN yarn install --pure-lockfile && npm run build
+RUN chown -R peertube:peertube /app
-# Configure the application
-RUN groupadd -g 991 peertube \
- && useradd -u 991 -g peertube -d /data -m peertube
USER peertube
+RUN yarn install --pure-lockfile \
+ && npm run build -- $NPM_RUN_BUILD_OPTS \
+ && rm -r ./node_modules ./client/node_modules \
+ && yarn install --pure-lockfile --production \
+ && yarn cache clean
+
+USER root
+
+RUN mkdir /data /config
+RUN chown -R peertube:peertube /data /config
+
ENV NODE_ENV production
-ENV NODE_CONFIG_DIR /app/support/docker/production/config
+ENV NODE_CONFIG_DIR /config
+
+VOLUME /data
+VOLUME /config
+
+COPY ./support/docker/production/docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh
+ENTRYPOINT ["/usr/local/bin/docker-entrypoint.sh"]
# Run the application
CMD ["npm", "start"]
-VOLUME ["/data"]
EXPOSE 9000