Erik
c14081d85f
New server/ service classifying zones as free_2h/3h/4h street vs pay_immediate lots. Public reads; writes require the admin bearer token (timing-safe compare). @fastify/rate-limit (120/min global, 20/min writes), manual IP denylist + auto-block on repeated auth failures. SQLite via better-sqlite3. Dockerfile + compose (loopback-only, mem/cpu capped) + nginx block + README. 9 tests pass. Deployed live at https://bigbrainparking.mowden.top (behind nginx + certbot). Not an npm workspace — kept out of the app/CI install to avoid the native dep. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
23 lines
757 B
Docker
23 lines
757 B
Docker
# Build stage — compiles TS and builds better-sqlite3's native addon.
|
|
FROM node:22-bookworm-slim AS build
|
|
WORKDIR /app
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends python3 make g++ ca-certificates \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
COPY package.json ./
|
|
RUN npm install --no-audit --no-fund
|
|
COPY tsconfig.json ./
|
|
COPY src ./src
|
|
RUN npm run build && npm prune --omit=dev
|
|
|
|
# Runtime stage — same base (binary-compatible native addon), no build tools.
|
|
FROM node:22-bookworm-slim AS runtime
|
|
WORKDIR /app
|
|
ENV NODE_ENV=production
|
|
COPY --from=build /app/node_modules ./node_modules
|
|
COPY --from=build /app/dist ./dist
|
|
COPY package.json ./
|
|
RUN mkdir -p /data && chown -R node:node /data
|
|
USER node
|
|
EXPOSE 8090
|
|
CMD ["node", "dist/index.js"]
|