Dockerfile

FROM oven/bun:1.4.1-alpine AS web
USER root
ARG COMMIT_TAG
ENV COMMIT_TAG=${COMMIT_TAG}

WORKDIR /app
COPY . .

RUN --mount=type=cache,id=bun,target=/root/.bun/install/cache \
  CYPRESS_INSTALL_BINARY=0 bun install --frozen-lockfile

RUN bun run build:web

FROM rust:1.97.1-alpine AS backend
RUN apk add --no-cache build-base

WORKDIR /app
COPY package.json seerr-api.yml ./
COPY backend-rs ./backend-rs

WORKDIR /app/backend-rs
RUN --mount=type=cache,id=cargo-registry,target=/usr/local/cargo/registry \
  --mount=type=cache,id=cargo-target,target=/app/backend-rs/target \
  cargo build --release --locked && \
  cp target/release/foreseerr /usr/local/bin/foreseerr

FROM alpine:3.23
ARG COMMIT_TAG
ENV NODE_ENV=production
ENV COMMIT_TAG=${COMMIT_TAG}
ENV FORESEERR_APP_ROOT=/app
ENV PORT=5055

RUN apk add --no-cache ca-certificates tzdata && \
  addgroup -S -g 1000 foreseerr && adduser -S -u 1000 -G foreseerr foreseerr

WORKDIR /app

COPY --chown=foreseerr:foreseerr seerr-api.yml ./
COPY --chown=foreseerr:foreseerr --from=web /app/dist/public ./dist/public
COPY --from=backend /usr/local/bin/foreseerr /usr/local/bin/foreseerr

RUN mkdir -p config && touch config/DOCKER && \
  echo "{\"commitTag\": \"${COMMIT_TAG}\"}" > committag.json && \
  chown foreseerr:foreseerr committag.json config config/DOCKER

USER foreseerr:foreseerr

EXPOSE 5055

CMD [ "foreseerr" ]