Dockerfile

# syntax=docker/dockerfile:1.7-labs

# backend builder
FROM mcr.microsoft.com/dotnet/sdk:10.0 AS backend-builder

WORKDIR /src

RUN apt-get update && apt-get install -y curl && rm -rf /var/lib/apt/lists/*

COPY ["PKVault.Backend/PKVault.Backend.csproj", "PKVault.Backend/"]

RUN dotnet restore "PKVault.Backend/PKVault.Backend.csproj"

COPY ./PKVault.Backend ./PKVault.Backend

RUN dotnet build "PKVault.Backend/PKVault.Backend.csproj"

# backend test
FROM backend-builder AS backend-test

COPY ["PKVault.Backend.Tests/PKVault.Backend.Tests.csproj", "PKVault.Backend.Tests/"]

RUN dotnet restore "PKVault.Backend.Tests/PKVault.Backend.Tests.csproj"

COPY ./global.json ./global.json
COPY ./PKVault.Backend.Tests ./PKVault.Backend.Tests

RUN dotnet build "PKVault.Backend.Tests/PKVault.Backend.Tests.csproj"

# tests
RUN dotnet test --project "./PKVault.Backend.Tests/PKVault.Backend.Tests.csproj" --no-restore --no-build

# backend publish
FROM backend-builder AS backend-publish

RUN dotnet publish "PKVault.Backend/PKVault.Backend.csproj" -c Release -o /app/publish

# frontend builder
FROM node:22-alpine AS frontend-builder

WORKDIR /app

# pinned version required
# https://github.com/npm/cli/issues/9151
RUN npm i -g npm@11.10.0

COPY frontend/package.json frontend/package-lock.json ./

RUN npm ci

COPY frontend .

RUN npm run gen:routes

COPY PKVault.Backend/swagger.json .

# generate SDK
ARG VITE_OPENAPI_PATH=swagger.json
ENV VITE_OPENAPI_PATH=$VITE_OPENAPI_PATH

RUN npm run gen:sdk:basic

RUN npm run gen:css:dts

COPY ./docs/functional ./_docs

ENV DOCS_PATH=./_docs

RUN npm run gen:docs

# frontend check
FROM frontend-builder AS frontend-check

RUN npm run c:type

RUN npm run test

RUN npm run c:lint

RUN npm run c:translate

# frontend publish
FROM frontend-builder AS frontend-publish

# build
RUN npm run build

# desktop builder
FROM backend-builder AS desktop-builder

WORKDIR /src

COPY ["PKVault.Desktop/PKVault.Desktop.csproj", "PKVault.Desktop/"]

RUN dotnet restore "PKVault.Desktop/PKVault.Desktop.csproj"

COPY --exclude=publishers ./PKVault.Desktop ./PKVault.Desktop
COPY --from=frontend-publish /app/dist ./PKVault.Desktop/Resources/wwwroot

RUN dotnet build "PKVault.Desktop/PKVault.Desktop.csproj"

# desktop publish
FROM desktop-builder AS desktop-publish

ARG RID
ENV RID=${RID:-linux-x64}

RUN dotnet publish "PKVault.Desktop/PKVault.Desktop.csproj" -c Release -o /app/publish -r ${RID}

RUN ls -la /app/publish

RUN if [ "$(echo $RID | grep -o 'win-')" ]; then \
  cp -r /app/publish /app/publish-final && \
  echo "=== Skip AppImage (non-linux: $RID) ==="; \
  fi

# desktop macOS - .app bundle (dotnet cross-compiles, no real Mac required)
FROM desktop-publish AS desktop-publish-macos-app

ARG VERSION
ENV VERSION=${VERSION}

COPY ./PKVault.Desktop/publishers/common ./PKVault.Desktop/publishers/common
COPY ./PKVault.Desktop/publishers/macos ./PKVault.Desktop/publishers/macos

RUN apt-get update && \
  apt-get install -y --no-install-recommends \
  python3 python3-pip zip curl && \
  pip3 install --break-system-packages icnsutil && \
  apt-get clean && rm -rf /var/lib/apt/lists/* /var/cache/apt/*

# rcodesign: cross-platform codesign, required for ad-hoc signing on Apple Silicon
# https://github.com/indygreg/apple-platform-rs
ARG APPLE_CODESIGN_VERSION=0.29.0
RUN ARCH=$(dpkg --print-architecture) && \
  case "$ARCH" in \
  amd64) RCODESIGN_TARGET=x86_64-unknown-linux-musl ;; \
  arm64) RCODESIGN_TARGET=aarch64-unknown-linux-musl ;; \
  *) echo "Unsupported architecture: $ARCH" && exit 1 ;; \
  esac && \
  curl -sL -o /tmp/apple-codesign.tar.gz \
  https://github.com/indygreg/apple-platform-rs/releases/download/apple-codesign/${APPLE_CODESIGN_VERSION}/apple-codesign-${APPLE_CODESIGN_VERSION}-${RCODESIGN_TARGET}.tar.gz && \
  tar -xzf /tmp/apple-codesign.tar.gz -C /tmp && \
  mv /tmp/apple-codesign-${APPLE_CODESIGN_VERSION}-${RCODESIGN_TARGET}/rcodesign /usr/local/bin/rcodesign && \
  rm -rf /tmp/apple-codesign.tar.gz /tmp/apple-codesign-${APPLE_CODESIGN_VERSION}-${RCODESIGN_TARGET} && \
  rcodesign --version

RUN mkdir -p /app/publish-final

WORKDIR /src/PKVault.Desktop/publishers/macos

RUN chmod +x build-app.sh && \
  ./build-app.sh ${RID} ${VERSION} /app/publish /app/publish-final-app && \
  cd /app/publish-final-app && \
  zip -r -y /app/publish-final/pkvault-${VERSION}-${RID}.app.zip PKVault.app

FROM desktop-publish AS desktop-publish-linux-base

COPY ./PKVault.Desktop/publishers/common ./PKVault.Desktop/publishers/common

RUN apt-get update && \
  apt-get install -y --no-install-recommends \
  wget binutils file \
  lintian && \
  apt-get clean && rm -rf /var/lib/apt/lists/* /var/cache/apt/*

RUN mkdir -p /app/publish-final

# desktop linux - AppImage
FROM desktop-publish-linux-base AS desktop-publish-linux-appimage

ARG VERSION
ENV VERSION=${VERSION}

COPY ./PKVault.Desktop/publishers/AppImage ./PKVault.Desktop/publishers/AppImage

WORKDIR /src/PKVault.Desktop/publishers/AppImage

RUN chmod +x build-appimage.sh && \
  sh build-appimage.sh

# desktop linux - deb  
FROM desktop-publish-linux-base AS desktop-publish-linux-deb

ARG VERSION
ENV VERSION=${VERSION}

COPY ./PKVault.Desktop/publishers/deb ./PKVault.Desktop/publishers/deb

WORKDIR /src/PKVault.Desktop/publishers/deb

RUN chmod +x build-deb.sh && \
  sh build-deb.sh

# desktop linux - flatpak
FROM ghcr.io/flathub-infra/flatpak-github-actions:gnome-50 AS desktop-publish-linux-flatpak

COPY ./PKVault.Desktop/publishers/flatpak .
COPY ./PKVault.Desktop/publishers/common ../common
COPY --from=desktop-publish /app/publish/PKVault /app/publish/PKVault

ARG VERSION
ENV VERSION=${VERSION}

ARG BUILD_DATE
ENV BUILD_DATE=${BUILD_DATE}

RUN chmod +x build-flatpak.sh && \
  sh build-flatpak.sh

FROM alpine:latest AS desktop

COPY --from=desktop-publish /app/publish-final /app

RUN ls -la /app

FROM alpine:latest AS desktop-macos

COPY --from=desktop-publish-macos-app /app/publish-final /app

RUN ls -la /app

FROM alpine:latest AS desktop-linux

COPY --from=desktop-publish /app/publish/PKVault /tmp/raw/PKVault
COPY --from=desktop-publish-linux-appimage /app/publish-final/ /tmp/appimage/
COPY --from=desktop-publish-linux-deb /app/publish-final/ /tmp/deb/
COPY --from=desktop-publish-linux-flatpak /app/publish-final/ /tmp/flatpak/

RUN mkdir -p /app && \
  cp /tmp/raw/* /tmp/appimage/* /tmp/deb/* /tmp/flatpak/* /app/ && \
  ls -la /app/

# monolith: backend & frontend
FROM mcr.microsoft.com/dotnet/aspnet:10.0-alpine AS monolith

ARG VERSION
ARG VCS_REF
ARG BUILD_DATE

LABEL org.opencontainers.image.title="PKVault" \
  org.opencontainers.image.description="Pokemon storage and save manipulation tool based on PKHeX." \
  org.opencontainers.image.url="https://github.com/Chnapy/PKVault" \
  org.opencontainers.image.source="https://github.com/Chnapy/PKVault" \
  org.opencontainers.image.version="${VERSION}" \
  org.opencontainers.image.revision="${VCS_REF}" \
  org.opencontainers.image.created="${BUILD_DATE}" \
  org.opencontainers.image.licenses="GPLv3" \
  org.opencontainers.image.vendor="PKVault" \
  org.opencontainers.image.authors="Richard Haddad" \
  org.opencontainers.image.base.name="mcr.microsoft.com/dotnet/aspnet:10.0-alpine"

RUN apk add --no-cache \
  nginx \
  supervisor \
  curl \
  # icu libs required for backend date manipulation non-utc
  icu-libs \
  # complete cultures (en/fr/...)
  icu-data-full \
  # timezones
  tzdata \
  && rm -rf /var/cache/apk/*
WORKDIR /app

# setup logs folders
RUN mkdir -p /var/log/supervisord /var/log/nginx /var/run/nginx \
  && chown -R 755 /var/log/nginx /var/run/nginx \
  && chmod -R 755 /var/log/supervisord

ENV PKVAULT_PATH=/pkvault

COPY --from=backend-publish /app/publish /app/backend
COPY --from=frontend-publish /app/dist /app/frontend

COPY nginx.conf /etc/nginx/nginx.conf
COPY supervisord.conf /etc/supervisor/conf.d/supervisord.conf

VOLUME [ "/pkvault" ]

EXPOSE 3000

CMD ["/usr/bin/supervisord", "-c", "/etc/supervisor/conf.d/supervisord.conf"]