feat: regent mothership

mothership/.dockerignore

@@ -0,0 +1,7 @@
+node_modules
+dist
+.git
+.gitignore
+*.md
+.env*
+data/

mothership/.env.example

@@ -0,0 +1,4 @@
+PORT=3001
+JWT_SECRET=change-me-to-a-random-string
+DB_PATH=./data/mothership.db
+LOG_LEVEL=info

mothership/.gitignore

@@ -0,0 +1,6 @@
+node_modules/
+dist/
+data/*.db
+data/*.db-wal
+data/*.db-shm
+.env

mothership/Caddyfile

@@ -0,0 +1,3 @@
+{$DOMAIN:localhost} {
+	reverse_proxy mothership:3001
+}

mothership/Dockerfile

@@ -0,0 +1,28 @@
+# Multi-stage build for Regent Mothership
+
+FROM node:22-slim AS build
+WORKDIR /app
+COPY package.json package-lock.json ./
+RUN npm ci
+COPY tsconfig.json ./
+COPY src/ ./src/
+RUN npx tsc
+
+FROM node:22-slim
+RUN addgroup --system mothership && adduser --system --ingroup mothership mothership
+WORKDIR /app
+COPY package.json package-lock.json ./
+RUN npm ci --omit=dev && chown -R mothership:mothership /app
+COPY --from=build --chown=mothership:mothership /app/dist/ ./dist/
+COPY --chown=mothership:mothership src/db/migrations/ ./dist/db/migrations/
+
+ENV PORT=3001
+ENV DB_PATH=/data/mothership.db
+ENV LOG_LEVEL=info
+VOLUME /data
+
+RUN mkdir -p /data && chown mothership:mothership /data
+
+USER mothership
+EXPOSE 3001
+CMD ["node", "dist/index.js"]

mothership/docker-compose.yml

@@ -0,0 +1,37 @@
+services:
+  mothership:
+    build: .
+    ports:
+      - "3001:3001"
+    volumes:
+      - mothership-data:/data
+    environment:
+      - JWT_SECRET=${JWT_SECRET:?JWT_SECRET is required}
+      - NODE_ENV=production
+      - DB_PATH=/data/mothership.db
+      - LOG_LEVEL=info
+    healthcheck:
+      test: ["CMD", "node", "-e", "fetch('http://localhost:3001/api/v1/health').then(r=>process.exit(r.ok?0:1))"]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+    restart: unless-stopped
+
+  caddy:
+    image: caddy:2-alpine
+    ports:
+      - "80:80"
+      - "443:443"
+    volumes:
+      - ./Caddyfile:/etc/caddy/Caddyfile
+      - caddy-data:/data
+      - caddy-config:/config
+    depends_on:
+      mothership:
+        condition: service_healthy
+    restart: unless-stopped
+
+volumes:
+  mothership-data:
+  caddy-data:
+  caddy-config: