harbor/Dockerfile at main · vijaydeepsinha/harbor · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
# syntax=docker/dockerfile:1

ARG NODE_VERSION=22

# ── Stage 1: build ────────────────────────────────────────────────────────────
FROM node:${NODE_VERSION}-alpine AS builder

WORKDIR /app

# isolated-vm is a C++ addon wrapping V8's Isolate API.
# node-gyp compiles it during npm install — requires these build tools.
RUN apk add --no-cache python3 make g++

COPY package*.json ./
RUN npm ci

COPY tsconfig.json index.ts ./
COPY core/       ./core/
COPY runtime/    ./runtime/
COPY tools/      ./tools/
COPY wiring/     ./wiring/
COPY spi/        ./spi/
COPY adapters/   ./adapters/

RUN npm run build && npm prune --omit=dev

# ── Stage 2: runtime ──────────────────────────────────────────────────────────
FROM node:${NODE_VERSION}-alpine AS runtime

LABEL org.opencontainers.image.title="Harbor" \
      org.opencontainers.image.description="MCP gateway that connects AI agents to backend APIs" \
      org.opencontainers.image.version="0.1.0" \
      org.opencontainers.image.authors="Vijaydeep Sinha" \
      org.opencontainers.image.licenses="Apache-2.0" \
      org.opencontainers.image.source="https://github.com/vdssinha/harbor"

WORKDIR /app

RUN addgroup -S harbor && adduser -S harbor -G harbor

COPY --from=builder --chown=harbor:harbor /app/dist         ./dist
COPY --from=builder --chown=harbor:harbor /app/node_modules ./node_modules
COPY --from=builder --chown=harbor:harbor /app/package.json ./

# Apache 2.0 requires LICENSE and NOTICE in all distributions
COPY --chown=harbor:harbor LICENSE NOTICE ./

# Demo services bundled — image works out of the box.
# Mount your own services at runtime:
#   docker run -v ./my-services:/app/services harbor-gateway
COPY --chown=harbor:harbor services/ ./services/

USER harbor

# dist/index.js resolves services relative to __dirname (/app/dist/) by default.
# SERVICES_DIR overrides that to the correct location inside the container.
# MCP_HOST must be 0.0.0.0 — 127.0.0.1 is unreachable from outside the container.
ENV MCP_HOST=0.0.0.0 \
    MCP_PORT=3333 \
    NODE_ENV=production \
    SERVICES_DIR=/app/services

EXPOSE 3333

HEALTHCHECK --interval=30s --timeout=5s --start-period=15s --retries=3 \
    CMD wget -qO- http://localhost:3333/health || exit 1

CMD ["node", "dist/index.js"]