feat: implement dockerfiles and improve cors configuration

backend/Dockerfile

@@ -0,0 +1,34 @@
+##### Builder stage ###########################################################
+FROM node:18-slim AS builder
+WORKDIR /app
+
+# Install dependencies (dev + prod) so we can build TypeScript
+COPY package.json yarn.lock ormconfig.json ./
+RUN yarn install --frozen-lockfile
+
+# Build TypeScript -> dist
+COPY . .
+RUN yarn build
+
+# Prune to production dependencies only (keeps sqlite3 from dependencies)
+RUN yarn install --frozen-lockfile --production
+
+##### Runtime stage ###########################################################
+FROM node:18-slim
+WORKDIR /app
+
+ENV NODE_ENV=production
+ENV PORT=3101
+
+# Copy compiled app and production node_modules from builder
+COPY --from=builder /app/dist ./dist
+COPY --from=builder /app/node_modules ./node_modules
+COPY --from=builder /app/ormconfig.json ./
+
+RUN mkdir -p /app/uploads /app/database
+
+# Include the sqlite database that migrations already prepared
+COPY --from=builder /app/src/database/database.sqlite ./database/
+
+EXPOSE 3101
+CMD ["node", "dist/server.js"]

backend/ormconfig.json

@@ -1,10 +1,12 @@
 {
     "type": "sqlite",
-    "database": "./src/database/database.sqlite",
+    "database": "./database/database.sqlite",
     "migrations": [
+        "./dist/database/migrations/*.js",
         "./src/database/migrations/*.ts"
     ],
     "entities": [
+        "./dist/models/*.js",
         "./src/models/*.ts"
     ],
     "cli": {

backend/src/server.ts

@@ -10,7 +10,11 @@ import routes from './routes';
 
 const app = express();
 
-app.use(cors());
+const allowedOrigins = (process.env.CORS_ORIGIN || 'http://localhost:3000')
+    .split(',')
+    .map(origin => origin.trim());
+
+app.use(cors({ origin: allowedOrigins }));
 app.use(express.json());
 
 app.use('/api', routes);