production: docker + nginx config for rf-flux.com

Dockerfile

@@ -0,0 +1,64 @@
+# ═══════════════════════════════════════════════════════════════
+# FLUX SRL — Production Dockerfile (Multi-Stage)
+# Next.js 16 + Prisma + next-intl + AI SDK
+# ═══════════════════════════════════════════════════════════════
+
+# ── Stage 1: Install dependencies ──
+FROM node:22-alpine AS deps
+RUN apk add --no-cache libc6-compat
+WORKDIR /app
+
+COPY package.json package-lock.json ./
+RUN npm ci
+
+# ── Stage 2: Build the application ──
+FROM node:22-alpine AS builder
+WORKDIR /app
+
+COPY --from=deps /app/node_modules ./node_modules
+COPY . .
+
+# Prisma: generate client for linux-musl (Alpine)
+# NOTE: dummy URL required because prisma.config.ts calls env("DATABASE_URL")
+# during generate. The real URL is injected at runtime via docker-compose.
+RUN DATABASE_URL="postgresql://dummy:dummy@localhost:5432/dummy" npx prisma generate
+
+# Disable telemetry during build
+ENV NEXT_TELEMETRY_DISABLED=1
+
+RUN npm run build
+
+# ── Stage 3: Production runner ──
+FROM node:22-alpine AS runner
+WORKDIR /app
+
+ENV NODE_ENV=production
+ENV NEXT_TELEMETRY_DISABLED=1
+
+# Security: run as non-root user
+RUN addgroup --system --gid 1001 nodejs
+RUN adduser --system --uid 1001 nextjs
+
+# Copy public assets (footage, images, GLB models)
+COPY --from=builder /app/public ./public
+
+# Copy standalone build
+COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
+COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
+
+# Copy Prisma schema + generated client (needed for migrations at runtime)
+COPY --from=builder /app/prisma ./prisma
+COPY --from=builder /app/node_modules/.prisma ./node_modules/.prisma
+COPY --from=builder /app/node_modules/@prisma ./node_modules/@prisma
+
+# Copy i18n message files (required by next-intl at runtime)
+COPY --from=builder /app/messages ./messages
+
+USER nextjs
+
+EXPOSE 3000
+
+ENV PORT=3000
+ENV HOSTNAME="0.0.0.0"
+
+CMD ["node", "server.js"]