update build args

.eslintrc.cjs

@@ -12,7 +12,12 @@ module.exports = {
     ecmaVersion: 2020,
     project: "./tsconfig.json",
   },
-  ignorePatterns: ["*.cjs", "!.lintstagedrc.js", ".lintstagedrc.js", "next.config.js"],
+  ignorePatterns: [
+    "*.cjs",
+    "!.lintstagedrc.js",
+    ".lintstagedrc.js",
+    "next.config.js",
+  ],
   plugins: ["@typescript-eslint"],
   root: true,
   env: {

.github/workflows/deploy.yml

@@ -65,6 +65,9 @@ jobs:
             sha=${{ github.sha }}
             sha_short=${{ env.GITHUB_SHA_SHORT }}
             app_env=${{ vars.APP_ENV }}
+            NEXT_PUBLIC_PROXY_KEY=${{ secrets.NEXT_PUBLIC_PROXY_KEY }}
+            NEXT_PUBLIC_MIXPANEL_TOKEN=${{ secrets.NEXT_PUBLIC_MIXPANEL_TOKEN }}
+            NEXT_PUBLIC_ANALYTICS_ENABLED=${{ secrets.NEXT_PUBLIC_ANALYTICS_ENABLED }}
 
       - name: Apply AWS k8s config
         run: aws eks update-kubeconfig --name ${{ vars.AWS_CLUSTER }} --region ${{ vars.AWS_REGION }}
@@ -83,10 +86,7 @@ jobs:
           --set imageTag="${{ env.GITHUB_SHA_SHORT }}" \
           --set host=${{ env.APP_DOMAIN }} \
           --set appName=${{ vars.APP_NAME }} \
-          --set ghcrSecret=${{ secrets.GHCR_SECRET  }} \
-          --set secrets.publicProxyKey=${{ secrets.NEXT_PUBLIC_MIXPANEL_TOKEN }} \
-          --set secrets.publicMixPanelToken=${{ secrets.NEXT_PUBLIC_ANALYTICS_ENABLED }} \
-          --set secrets.publicProxyKey=${{ secrets.NEXT_PUBLIC_ANALYTICS_ENABLED }}
+          --set ghcrSecret=${{ secrets.GHCR_SECRET  }}
 
       - name: Verify deployment
         run: |

.prettierignore

@@ -1 +1,2 @@
 /helm
+.github/workflows

Dockerfile

@@ -1,10 +1,29 @@
-FROM node:21-alpine AS base
+FROM node:21-alpine AS build
 
 WORKDIR /app
 COPY package*.json ./
 RUN npm install
 COPY . .
-RUN npm run build
+
+ARG NEXT_PUBLIC_PROXY_KEY=redacted_next_public_proxy_key
+ARG NEXT_PUBLIC_MIXPANEL_TOKEN=redacted_next_public_mixpanel_token
+ARG NEXT_PUBLIC_ANALYTICS_ENABLED=false
+
+RUN npm run format:check
+RUN npm run lint
+RUN NEXT_PUBLIC_PROXY_KEY=${NEXT_PUBLIC_PROXY_KEY} \
+    NEXT_PUBLIC_MIXPANEL_TOKEN=${NEXT_PUBLIC_MIXPANEL_TOKEN} \
+    NEXT_PUBLIC_ANALYTICS_ENABLED=${NEXT_PUBLIC_ANALYTICS_ENABLED} \
+    npm run build
+
+
+FROM node:21-alpine AS runtime
+
+WORKDIR /app
+COPY --from=build /app/.next ./.next
+COPY package*.json ./
+
+RUN npm install #--omit=dev
 
 EXPOSE 3000
 CMD ["npm", "start"]

helm/app/templates/deployment.yaml

@@ -36,12 +36,6 @@ spec:
               value: {{ .Values.deployEnv }}
             - name: APP_VERSION
               value: {{ .Values.appVersion | quote }}
-            - name: NEXT_PUBLIC_PROXY_KEY
-              value: {{ .Values.secrets.publicProxyKey | quote }}
-            - name: NEXT_PUBLIC_MIXPANEL_TOKEN
-              value: {{ .Values.secrets.publicMixPanelToken | quote }}
-            - name: NEXT_PUBLIC_ANALYTICS_ENABLED
-              value: {{ .Values.secrets.publicProxyKey | quote }}
           ports:
             - containerPort: {{ .Values.containerPort }}
           resources:

helm/app/values.yaml

@@ -34,9 +34,3 @@ certIssuingMode: false
 # http
 publicService: true
 sslRedirect: false
-
-
-secrets:
-  publicProxyKey: ""
-  publicMixPanelToken: ""
-  secrets.publicProxyKey: ""

package.json

@@ -97,6 +97,6 @@
     "lint-staged": "^15.2.10",
     "monaco-editor-webpack-plugin": "^7.0.1",
     "next-transpile-modules": "^10.0.0",
-    "prettier": "^3.3.2"
+    "prettier": "^3.3.3"
   }
 }