mirror of
https://github.com/Crosstalk-Solutions/project-nomad.git
synced 2026-07-27 18:54:37 +02:00
2110dc1005
Add NOMAD-specific getting-started docs for all 9 curated Supply Depot apps,
the catalog/install fixes each one surfaced, and a way to reach the docs from
each app card.
Docs:
- New in-app Markdoc page admin/docs/supply-depot-apps.md covering all 9 apps
(Stirling PDF, File Browser, Calibre-Web, IT Tools, Excalidraw, Homebox,
Vaultwarden, Jellyfin, Meshtastic Web): first run/login, where data lives,
and offline behaviour. Registered in docs_service DOC_ORDER.
- Manage > Docs dropdown item linking each app to its section
(/docs/supply-depot-apps#<anchor>): anchor map in constants/supply_depot_docs.ts,
heading anchors via Markdoc {% #id %}, and hash-scroll on the docs page.
Install / catalog fixes:
- Stirling PDF: open straight to the tools (SECURITY_ENABLELOGIN=false; the old
v1 DOCKER_ENABLE_SECURITY flag was dead).
- File Browser: seed a known admin/nomad login (bcrypt) instead of a random
log-only password; scope visibility to content folders via mount selection and
move the DB out of the browsable root.
- Calibre-Web: bundle an empty Calibre library and seed it on install so setup
doesn't dead-end at db config (_runPreinstallActions__CalibreWeb).
- Homebox: swap the archived hay-kot image for the maintained sysadminsmedia fork.
- Vaultwarden: generate a self-signed cert on install and serve HTTPS by default
(_runPreinstallActions__Vaultwarden + ROCKET_TLS + ui_location https:8480), so
the web vault has the secure context it requires.
- Jellyfin: pre-create storage/media/{Movies,TV Shows,Music,Photos} so each
library points at its own subfolder, avoiding the overlapping-path issue that
silently hides content (_runPreinstallActions__Jellyfin).
- Seeder run() now also syncs ui_location for non-modified curated services, so a
catalog link/scheme/port change reaches existing installs on update.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
96 lines
3.6 KiB
Docker
96 lines
3.6 KiB
Docker
FROM node:22-slim AS base
|
|
|
|
# Install bash & curl for entrypoint script compatibility, graphicsmagick for pdf2pic, and vips-dev & build-base for sharp
|
|
RUN apt-get update && apt-get install -y \
|
|
bash \
|
|
curl \
|
|
graphicsmagick \
|
|
libvips-dev \
|
|
build-essential \
|
|
pciutils \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# All deps stage
|
|
FROM base AS deps
|
|
WORKDIR /app
|
|
ADD admin/package.json admin/package-lock.json ./
|
|
RUN npm ci
|
|
|
|
# Production only deps stage
|
|
FROM base AS production-deps
|
|
WORKDIR /app
|
|
ADD admin/package.json admin/package-lock.json ./
|
|
RUN npm ci --omit=dev
|
|
|
|
# Build stage
|
|
FROM base AS build
|
|
WORKDIR /app
|
|
COPY --from=deps /app/node_modules /app/node_modules
|
|
ADD admin/ ./
|
|
RUN node ace build
|
|
|
|
# Production stage
|
|
FROM base
|
|
ARG VERSION=dev
|
|
ARG BUILD_DATE
|
|
ARG VCS_REF
|
|
ARG TARGETARCH
|
|
|
|
# go-pmtiles (regional map extracts). Pinned so the CLI's stdout format stays
|
|
# in sync with parseDryRunOutput().
|
|
ARG PMTILES_VERSION=1.30.2
|
|
# Upstream releases don't ship a checksums file, so pin per-arch SHA256 here.
|
|
# When bumping PMTILES_VERSION, regenerate these with:
|
|
# curl -fsSL <release-url> | sha256sum
|
|
ARG PMTILES_SHA256_AMD64=2cd3aa18868297fc88425038f794efdc0995e0275f4ca16fa496dd79e245a40c
|
|
ARG PMTILES_SHA256_ARM64=804cdf071834e1156af554c1a26cc42b56b9cde5a2db9c6e3653d16fb846d5fa
|
|
RUN set -eux; \
|
|
case "${TARGETARCH:-amd64}" in \
|
|
amd64) PMTILES_ARCH=x86_64; PMTILES_SHA256="${PMTILES_SHA256_AMD64}" ;; \
|
|
arm64) PMTILES_ARCH=arm64; PMTILES_SHA256="${PMTILES_SHA256_ARM64}" ;; \
|
|
*) echo "Unsupported TARGETARCH: ${TARGETARCH}" >&2; exit 1 ;; \
|
|
esac; \
|
|
TARBALL="go-pmtiles_${PMTILES_VERSION}_Linux_${PMTILES_ARCH}.tar.gz"; \
|
|
cd /tmp; \
|
|
curl -fsSL -o "$TARBALL" \
|
|
"https://github.com/protomaps/go-pmtiles/releases/download/v${PMTILES_VERSION}/${TARBALL}"; \
|
|
echo "${PMTILES_SHA256} ${TARBALL}" | sha256sum -c -; \
|
|
tar -xzf "$TARBALL" -C /usr/local/bin pmtiles; \
|
|
rm -f "$TARBALL"; \
|
|
chmod +x /usr/local/bin/pmtiles; \
|
|
/usr/local/bin/pmtiles version
|
|
|
|
# Labels
|
|
LABEL org.opencontainers.image.title="Project N.O.M.A.D" \
|
|
org.opencontainers.image.description="The Project N.O.M.A.D Official Docker image" \
|
|
org.opencontainers.image.version="${VERSION}" \
|
|
org.opencontainers.image.created="${BUILD_DATE}" \
|
|
org.opencontainers.image.revision="${VCS_REF}" \
|
|
org.opencontainers.image.vendor="Crosstalk Solutions, LLC" \
|
|
org.opencontainers.image.documentation="https://github.com/CrosstalkSolutions/project-nomad/blob/main/README.md" \
|
|
org.opencontainers.image.source="https://github.com/CrosstalkSolutions/project-nomad" \
|
|
org.opencontainers.image.licenses="Apache-2.0"
|
|
|
|
ENV NODE_ENV=production
|
|
WORKDIR /app
|
|
COPY --from=production-deps /app/node_modules /app/node_modules
|
|
COPY --from=build /app/build /app
|
|
# Generate version.json from the VERSION build-arg so the image tag is the
|
|
# single source of truth (previously copied root package.json, which drifted
|
|
# from the tag when semantic-release did not commit the bump back).
|
|
RUN echo "{\"version\":\"${VERSION}\"}" > /app/version.json
|
|
|
|
# Copy docs and README for access within the container
|
|
COPY admin/docs /app/docs
|
|
COPY README.md /app/README.md
|
|
|
|
# Empty Calibre library, seeded into storage/books on Calibre-Web install
|
|
# (see DockerService._runPreinstallActions__CalibreWeb)
|
|
COPY install/calibre-empty-library/metadata.db /app/assets/calibre/metadata.db
|
|
|
|
# Copy entrypoint script and ensure it's executable
|
|
COPY install/entrypoint.sh /usr/local/bin/entrypoint.sh
|
|
RUN chmod +x /usr/local/bin/entrypoint.sh
|
|
|
|
EXPOSE 8080
|
|
ENTRYPOINT ["/usr/local/bin/entrypoint.sh"] |