push

web-server/.dockerignore

@@ -0,0 +1,11 @@
+node_modules
+uploads
+.env
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+pnpm-debug.log*
+.DS_Store
+Dockerfile
+.dockerignore

web-server/.env.example

@@ -1,4 +1,9 @@
 PORT=3000
+WEB_SERVER_IMAGE_REPOSITORY=toiiiiday/robot-installer-web-server
+WEB_SERVER_CONTAINER_NAME=robot-installer-web-server
+WEB_SERVER_PORT=3000
+IMAGE_TAG=1.0.1
+DOCKER_NETWORK=robot-installer-net
 SQLSERVER_HOST=172.20.235.176
 SQLSERVER_PORT=1433
 SQLSERVER_DATABASE=RobotInstaller
@@ -8,6 +13,7 @@ SQLSERVER_ENCRYPT=false
 SQLSERVER_TRUST_SERVER_CERTIFICATE=true
 AUTH_SECRET=change_this_to_a_long_random_value
 SESSION_MAX_AGE_MS=28800000
+SESSION_COOKIE_SECURE=false
 EMAIL_CONFIRMATION_EXPIRES_MS=86400000
 APP_BASE_URL=http://localhost:3000
 

web-server/Dockerfile

@@ -0,0 +1,28 @@
+FROM node:22-alpine AS dependencies
+
+WORKDIR /app
+
+COPY package*.json ./
+RUN npm ci --omit=dev
+
+FROM node:22-alpine AS runtime
+
+ENV NODE_ENV=production
+ENV PORT=3000
+
+WORKDIR /app
+
+COPY --from=dependencies /app/node_modules ./node_modules
+COPY . .
+
+RUN mkdir -p uploads/packages/agent \
+  && chown -R node:node uploads
+
+USER node
+
+EXPOSE 3000
+
+HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
+  CMD node -e "fetch('http://127.0.0.1:' + (process.env.PORT || 3000) + '/healthz').then((response) => process.exit(response.ok ? 0 : 1)).catch(() => process.exit(1))"
+
+CMD ["npm", "start"]

web-server/docker-compose.yml

@@ -0,0 +1,29 @@
+services:
+  web-server:
+    image: ${WEB_SERVER_IMAGE_REPOSITORY:-robot-installer-web-server}:${IMAGE_TAG:-local}
+    build:
+      context: .
+    container_name: ${WEB_SERVER_CONTAINER_NAME:-robot-installer-web-server}
+    env_file:
+      - ./.env
+    environment:
+      NODE_ENV: production
+      PORT: 3000
+      APP_BASE_URL: ${APP_BASE_URL:-http://localhost:8080}
+      SESSION_COOKIE_SECURE: ${SESSION_COOKIE_SECURE:-false}
+      WEB_CLIENT_ORIGINS: ${WEB_CLIENT_ORIGINS:-http://localhost:8080,http://localhost:5173,http://localhost:4173}
+    ports:
+      - "${WEB_SERVER_PORT:-3000}:3000"
+    volumes:
+      - web_server_uploads:/app/uploads
+    networks:
+      - robot-installer
+    restart: unless-stopped
+
+networks:
+  robot-installer:
+    name: ${DOCKER_NETWORK:-robot-installer-net}
+    external: true
+
+volumes:
+  web_server_uploads:

web-server/server.js

@@ -18,6 +18,7 @@ const agentPackageDir = path.resolve(process.env.AGENT_PACKAGE_DIR || path.join(
 const authCookieName = 'robot_installer_session';
 const sessionMaxAgeMs = Number(process.env.SESSION_MAX_AGE_MS || 1000 * 60 * 60 * 8);
 const authSecret = process.env.AUTH_SECRET || process.env.SESSION_SECRET || 'robot-installer-dev-secret';
+const secureSessionCookie = getBooleanEnv(process.env.SESSION_COOKIE_SECURE, process.env.NODE_ENV === 'production');
 const publicApiCorsOrigins = getCsvEnv(process.env.WEB_CLIENT_ORIGINS || process.env.PUBLIC_API_CORS_ORIGINS, [
   'https://robot.installer',
   'http://localhost:5173',
@@ -28,6 +29,10 @@ const agentVersionCollator = new Intl.Collator('en', {
   sensitivity: 'base'
 });
 
+app.get('/healthz', (req, res) => {
+  res.status(200).json({ status: 'ok' });
+});
+
 fs.mkdirSync(uploadDir, { recursive: true });
 fs.mkdirSync(agentPackageDir, { recursive: true });
 
@@ -156,6 +161,11 @@ function getCsvEnv(value, fallback) {
     .filter(Boolean);
 }
 
+function getBooleanEnv(value, fallback) {
+  if (value === undefined || value === null || value === '') return fallback;
+  return ['1', 'true', 'yes', 'on'].includes(String(value).toLowerCase());
+}
+
 function isPublicApiCorsPath(pathname) {
   return pathname === '/api/apps'
     || pathname.startsWith('/api/apps/')
@@ -345,7 +355,7 @@ function setAuthCookie(res, user) {
     httpOnly: true,
     maxAge: sessionMaxAgeMs,
     sameSite: 'lax',
-    secure: process.env.NODE_ENV === 'production'
+    secure: secureSessionCookie
   });
 }
 
@@ -353,7 +363,7 @@ function clearAuthCookie(res) {
   res.clearCookie(authCookieName, {
     httpOnly: true,
     sameSite: 'lax',
-    secure: process.env.NODE_ENV === 'production'
+    secure: secureSessionCookie
   });
 }