approvedcompleteApache-2.0
Single-container packaging: app + rauthy in one image
007-single-container-packaging
The deliverable image: one container running rauthy (loopback :8081) and the Encore app (:8080) under a die-together entrypoint, all durable state on a single /data volume, every secret self-provisioned at first boot. scripts/docker-build.sh builds from a clean git worktree of HEAD, injects the cross-built addon, the built SPA, and production node_modules, runs `encore build docker`, asserts the base-image entrypoint, and layers rauthy + the entrypoint on top.
- Establishes
- docker/Dockerfile
- docker/entrypoint.sh
- docker/first-boot.mjs
- scripts/docker-build.sh
- infra.config.json
- .dockerignore
- Sections
- 007: Single-container packaging
- 1. Purpose
- 2. Territory
- 3. Behavior
- 4. Out of scope
- Source
- specs/007-single-container-packaging/spec.md @ dc4c9237e12aas of 2026-07-21 ยท shard 87aa21dbd33c