Change settings

Dockerfile

@@ -1,25 +1,33 @@
-# Install deps
-ARG VITE_SUPABASE_URL
-ARG VITE_SUPABASE_ANON_KEY
-FROM node:20-alpine AS deps
+# ---------- build ----------
+FROM node:20-alpine AS build
 WORKDIR /app
+
+# deps
 COPY package.json package-lock.json* ./
 RUN npm ci --no-audit --no-fund || npm i --no-audit --no-fund
 
-# Final runtime image
-FROM node:20-alpine
-WORKDIR /app
-COPY --from=deps /app/node_modules ./node_modules
+# app source
 COPY . .
 
-# Expose to Vite during `vite build`
-ENV VITE_SUPABASE_URL=$VITE_SUPABASE_URL
-ENV VITE_SUPABASE_ANON_KEY=$VITE_SUPABASE_ANON_KEY
-EXPOSE 4173
+# Mount HF secrets at build-time, write .env.production, then build
+# (These IDs MUST match your Secrets names in the Settings tab)
+RUN --mount=type=secret,id=VITE_SUPABASE_URL,mode=0444,required=true \
+    --mount=type=secret,id=VITE_SUPABASE_ANON_KEY,mode=0444,required=true \
+    sh -lc '\
+      URL="$(cat /run/secrets/VITE_SUPABASE_URL)"; \
+      ANON="$(cat /run/secrets/VITE_SUPABASE_ANON_KEY)"; \
+      printf "VITE_SUPABASE_URL=%s\nVITE_SUPABASE_ANON_KEY=%s\n" "$URL" "$ANON" > .env.production; \
+      echo "--- .env.production ---"; cat .env.production; echo "-----------------------"; \
+      npm run build \
+    '
 
-CMD sh -lc '\
-  echo "Writing .env.production from runtime envs..."; \
-  env \
-  printf "VITE_SUPABASE_URL=%s\nVITE_SUPABASE_ANON_KEY=%s\n" "$VITE_SUPABASE_URL" "$VITE_SUPABASE_ANON_KEY" > .env.production; \
-  echo "--- .env.production ---"; cat .env.production; echo "-----------------------"; \
-  npm run build && npx vite preview --host 0.0.0.0 --port 4173'
+# ---------- runtime ----------
+FROM node:20-alpine AS runtime
+WORKDIR /app
+
+# serve built assets
+COPY --from=build /app/dist ./dist
+RUN npm i -g serve@14
+
+EXPOSE 4173
+CMD ["serve", "-s", "dist", "-l", "4173"]