Update Dockerfile (#844)

* Update Dockerfile for latest website changes

* Update to Node 16.
* Do not run as root, this also works better with Node privilege-dropping.
* Update README with new run instructions.

* Add .dockerignore to avoid sending large build contexts

website/.dockerignore

@@ -0,0 +1,11 @@
+# Avoid uploading large Docker contexts
+.cache/
+public/
+node_modules
+.npm
+logs
+*.log
+npm-debug.log*
+www/
+_deploy.sh
+*.html

website/Dockerfile

@@ -1,16 +1,14 @@
-FROM node:11.15.0
+FROM node:16
 
-WORKDIR /thinc-ai
-
-RUN npm install -g gatsby-cli@2.7.4
-
-COPY package.json .
-COPY package-lock.json .
-
-RUN npm install
+USER node
 
 # This is so the installed node_modules will be up one directory
 # from where a user mounts files, so that they don't accidentally mount
 # their own node_modules from a different build
 # https://nodejs.org/api/modules.html#modules_loading_from_node_modules_folders
-WORKDIR /thinc-ai/website/
+WORKDIR /home/node
+COPY --chown=node package.json .
+COPY --chown=node package-lock.json .
+RUN npm install
+
+WORKDIR /home/node/website/

website/README.md

@@ -28,10 +28,10 @@ Afterwards, the website can be built and run in the container:
 
 ```bash
 docker run --rm -it \
-  -v $PWD:/thinc-ai/website \
+  -v $PWD:/home/node/website \
   -p 8000:8000 \
   thinc-ai \
-  gatsby develop -H 0.0.0.0
+  npm run dev -- -H 0.0.0.0
 ```
 
 This is currently the only way to build the website on ARM64 Macs, since the