fix: simplify Dockerfiles for api-main and reader-main (#490)

* refactor: simplify Dockerfiles for api-main and reader-main

* Removed multi-stage build setup and unnecessary workspace copying.
* Updated working directory to /app for consistency.

* fix: re-add NODE_TLS_REJECT_UNAUTHORIZED

* refactor: reduce docker images by copying only required code into stage 2

* chore: remove PostgreSQL replication setup SQL file

Replication subscriber is now initialized when first run by the feed
sync app.

Also removing the SQL file fixes an issue that made PostgreSQl docker
initialization fail.

* fix: change Docker files to use `--frozen-lockfile`

Done to have reproducible builds, otherwise we could have unexpected
issues with dependencies.

---------

Co-authored-by: jeronimoalbi <894299+jeronimoalbi@users.noreply.github.com>

Author: alanrsoares

docker-compose.yml

@@ -14,7 +14,6 @@ services:
       - '5432:5432'
     volumes:
       - ./packages/postgresql/postgresql.conf:/etc/postgresql/postgresql.conf:ro
-      - ./packages/postgresql/setup-replication.sql:/docker-entrypoint-initdb.d/setup-replication.sql
       - ./data/postgres_data:/var/lib/postgresql/18/data
     healthcheck:
       test: [CMD, pg_isready, -U, default]

packages/api-main/Dockerfile

@@ -1,20 +1,28 @@
-FROM oven/bun:1.3.2-slim AS base
+# Stage 1: Dependencies installation
+FROM oven/bun:1.3.2-slim AS deps
+WORKDIR /app
 
-FROM base AS build
-WORKDIR /workspace
+# Copy all monorepo files, excluding the ones ignored by dockerignore.
+# This is required because Bun needs all monorepo apps to be able to install deps using `--frozen-lockfile`.
 COPY . .
 
-# Install all workspace dependencies first
-# Cache bun's global install cache for faster builds
+# Install dependencies with cache
 RUN --mount=type=cache,id=bun-cache,target=/root/.bun/install/cache \
     bun install --frozen-lockfile
 
-FROM base AS runtime
+# Stage 2: Runtime
+FROM oven/bun:1.3.2-slim AS runtime
 WORKDIR /app
 
-# Copy workspace structure (needed for drizzle-kit workspace resolution)
-COPY --from=build /workspace/packages/api-main ./packages/api-main
+# Copy installed dependencies from deps stage (only root node_modules, bun hoists workspace deps)
+COPY --from=deps /app/node_modules ./node_modules
+
+# Copy workspace files and packages from deps stage
+COPY --from=deps /app/package.json /app/bun.lock /app/bunfig.toml ./
+COPY --from=deps /app/packages/lib-api-types ./packages/lib-api-types
+COPY --from=deps /app/packages/api-main ./packages/api-main
 
+# Set working directory to api-main package
 WORKDIR /app/packages/api-main
 
 CMD ["bun", "run", "push-and-start"]

packages/postgresql/setup-replication.sql

@@ -1,18 +1,29 @@
-FROM oven/bun:1.3.2-slim AS base
+# Stage 1: Dependencies installation
+FROM oven/bun:1.3.2-slim AS deps
+WORKDIR /app
 
-FROM base AS build
-WORKDIR /workspace
+# Copy all monorepo files, excluding the ones ignored by dockerignore.
+# This is required because Bun needs all monorepo apps to be able to install deps using `--frozen-lockfile`.
 COPY . .
 
-# Install all workspace dependencies first
-# Cache bun's global install cache for faster builds
+# Install dependencies with cache
 RUN --mount=type=cache,id=bun-cache,target=/root/.bun/install/cache \
     bun install --frozen-lockfile
 
-FROM base AS runtime
-ENV NODE_TLS_REJECT_UNAUTHORIZED=0
+# Stage 2: Runtime
+FROM oven/bun:1.3.2-slim AS runtime
 WORKDIR /app
+ENV NODE_TLS_REJECT_UNAUTHORIZED=0
+
+# Copy installed dependencies from deps stage (only root node_modules, bun hoists workspace deps)
+COPY --from=deps /app/node_modules ./node_modules
+
+# Copy workspace files and packages from deps stage
+COPY --from=deps /app/package.json /app/bun.lock /app/bunfig.toml ./
+COPY --from=deps /app/packages/lib-api-types ./packages/lib-api-types
+COPY --from=deps /app/packages/reader-main ./packages/reader-main
 
-COPY --from=build /workspace/packages/reader-main ./
+# Set working directory to reader-main package
+WORKDIR /app/packages/reader-main
 
 CMD ["bun", "run", "start"]