chore: enhance docker image

.changeset/many-birds-switch.md

@@ -0,0 +1,5 @@
+---
+"@quassel/backend": patch
+---
+
+Enhance docker image

apps/backend/Dockerfile

@@ -1,20 +1,20 @@
 # Install dependencies only when needed
-FROM docker.io/node:lts-alpine AS deps
+FROM docker.io/node:20-alpine AS deps
 # Check https://github.com/nodejs/docker-node/tree/b4117f9333da4138b03a546ec926ef50a31506c3#nodealpine to understand why libc6-compat might be needed.
 RUN apk add --no-cache libc6-compat
 WORKDIR /usr/src/app
 COPY package*.json ./
 RUN npm install --omit=dev
 
 # Production image, copy all the files and run nest
-FROM docker.io/node:lts-alpine AS runner
+FROM docker.io/node:20-alpine AS runner
 RUN apk add --no-cache dumb-init
 ENV NODE_ENV=production
 ENV PORT=3000
 WORKDIR /usr/src/app
 COPY --from=deps /usr/src/app/node_modules ./node_modules
-COPY --from=deps /usr/src/app/package.json ../package.json
-COPY dist/* .
+COPY --from=deps /usr/src/app/package.json ./package.json
+COPY dist/ .
 RUN chown -R node:node .
 USER node
 EXPOSE 3000

apps/backend/src/mikro-orm.config.ts → apps/backend/mikro-orm.config.ts

@@ -2,7 +2,7 @@ import { defineConfig, PostgreSqlDriver } from "@mikro-orm/postgresql";
 import { Migrator } from "@mikro-orm/migrations";
 import { TsMorphMetadataProvider } from "@mikro-orm/reflection";
 import { SeedManager } from "@mikro-orm/seeder";
-import { configuration } from "./config/configuration";
+import { configuration } from "./src/config/configuration";
 
 const c = configuration();
 

docs/examples/docker-compose.yaml

@@ -39,7 +39,11 @@ services:
       - database
     environment:
       LANG: C.UTF-8
-      DATABASE_URL: "postgresql://postgres:secret@database/quassel_production"
+      CORS_ORIGIN: https://test.example.com
+      SESSION_SECRET: secret
+      SESSION_SALT: salt
+      DATABASE_HOST: database
+      DATABASE_PASSWORD: secret
     labels:
       - "com.centurylinklabs.watchtower.enable=true"
       - "traefik.enable=true"

docs/setup.md

@@ -106,6 +106,10 @@ The following sources were used:
    sed -i "s/example.com/example.com/g" docker-compose.yaml
    ```
 
+1. Set environment variables in `docker-compose.yaml`:
+   - `SESSION_SECRET` to a 32byte random hex string with `openssl rand -hex 32`
+   - `SESSION_SALT` to a 8byte random hex string with `openssl rand -hex 8`
+   - `DATABASE_PASSWORD` set a more secure password for the database
 1. Change contact email for SSL certificates in `traefik.yaml`
 1. Configure the following environment variables in `docker-compose.yaml`:
    - **todo**