Dockerfile

FROM public.ecr.aws/q8n3y8x7/ruby:2.6.6
MAINTAINER dxw <rails@dxw.com>

# install base packages
RUN apt-get update -y -q2 \
  && apt-get upgrade -y -q2 \
  && apt-get -y -q2 clean

# install npm and node LTS
RUN apt-get update && apt-get install -y -q2 \
    npm
RUN npm install npm@latest -g && \
    npm install n -g && \
    n lts

RUN YARN_VERSION=1.9.4 \
  set -ex \
  && curl -fSLO --compressed "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz" \
  && mkdir -p /opt/yarn \
  && tar -xzf yarn-v$YARN_VERSION.tar.gz -C /opt/yarn --strip-components=1 \
  && ln -s /opt/yarn/bin/yarn /usr/local/bin/yarn \
  && ln -s /opt/yarn/bin/yarn /usr/local/bin/yarnpkg \
  && rm yarn-v$YARN_VERSION.tar.gz

# create application user
RUN addgroup --gid 999 --quiet app \
  && adduser --gid 999 --uid 999 --quiet --disabled-password app

# set rails environment
ARG RAILS_ENV
ENV RAILS_ENV=${RAILS_ENV:-production}
ENV RACK_ENV=${RAILS_ENV:-production}

# create and use application home
ENV APP_NAME affordable-housing-monitoring
ENV APP_PATH /srv/affordable-housing-monitoring
RUN mkdir -p $APP_PATH
WORKDIR $APP_PATH

# bundle ruby gems to create a static dependency tree
USER app
ENV GEM_PATH /usr/local/bundle
RUN gem install --quiet bundler

USER root
COPY Gemfile $APP_PATH/Gemfile
COPY Gemfile.lock $APP_PATH/Gemfile.lock
RUN chown -R app:app $APP_PATH

USER app
# bundle ruby gems based on the current environment, default to production
RUN \
  if [ "$RAILS_ENV" = "production" ]; then \
    bundle install --without development test --jobs 25 --retry 3; \
  else \
    bundle install --jobs 25 --retry 3; \
  fi

USER root

# add project files
COPY . $APP_PATH

# yarn install
RUN yarn install

# compile assets for production
RUN SECRET_KEY_BASE=dummy bundle exec rake assets:precompile

# make app own the project files
RUN chown -R app:app $APP_PATH

# copy docker-entrypoint
COPY ./docker-entrypoint.sh /
RUN chmod +x /docker-entrypoint.sh

# run application as the app user
USER app

# expose public assets as a volume, this needs to happen after any changes to the filesystem
VOLUME ["/srv/affordable-housing-monitoring/public"]

EXPOSE 3000
ENTRYPOINT ["/docker-entrypoint.sh"]
CMD ["bundle", "exec", "puma"]