From 169516f0fb2f9045372f3403f8f95674dce045d9 Mon Sep 17 00:00:00 2001
From: shankar0123 <skreddy040@gmail.com>
Date: Mon, 16 Mar 2026 14:16:55 -0400
Subject: [PATCH] fix: add frontend build stage to Dockerfile
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The Dockerfile was copying raw web/ source files but never building the
frontend. Since .gitignore excludes web/dist/, the Docker image had no
built frontend — only the Vite dev entry point (web/index.html) which
references /src/main.tsx and only works with the Vite dev server. This
caused a blank page when accessing the dashboard.

Fix: Add a Node.js build stage that runs npm ci && npm run build, then
copy only web/dist/ into the final image. Also add web/node_modules and
web/dist to .dockerignore to keep the build context clean.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 .dockerignore |  2 ++
 Dockerfile    | 18 +++++++++++++++---
 2 files changed, 17 insertions(+), 3 deletions(-)

diff --git a/.dockerignore b/.dockerignore
index c7c1209..446cfd5 100644
--- a/.dockerignore
+++ b/.dockerignore
@@ -7,3 +7,5 @@ scripts
 coverage.*
 .env
 .DS_Store
+web/node_modules
+web/dist
diff --git a/Dockerfile b/Dockerfile
index 0efa9fa..c5b3634 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,17 @@
 # Multi-stage build for certctl server
-# Stage 1: Build
+
+# Stage 1: Build frontend
+FROM node:20-alpine AS frontend
+
+WORKDIR /app/web
+
+COPY web/package.json web/package-lock.json ./
+RUN npm ci
+
+COPY web/ .
+RUN npm run build
+
+# Stage 2: Build Go binary
 FROM golang:1.22-alpine AS builder
 
 RUN apk add --no-cache git ca-certificates tzdata
@@ -18,7 +30,7 @@ RUN CGO_ENABLED=0 GOOS=linux GOARCH=${TARGETARCH} go build \
     -o bin/server \
     ./cmd/server
 
-# Stage 2: Runtime
+# Stage 3: Runtime
 FROM alpine:3.19
 
 RUN apk add --no-cache ca-certificates tzdata curl
@@ -30,7 +42,7 @@ WORKDIR /app
 
 COPY --from=builder /app/bin/server .
 COPY --chown=certctl:certctl migrations/ ./migrations/
-COPY --chown=certctl:certctl web/ ./web/
+COPY --from=frontend --chown=certctl:certctl /app/web/dist/ ./web/dist/
 
 RUN chown -R certctl:certctl /app