feat: packaging Docker (Dockerfile + compose, volumes data/reports)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

docker/Dockerfile

@@ -0,0 +1,20 @@
+FROM node:22-bookworm-slim AS build
+WORKDIR /app
+RUN corepack enable
+COPY package.json pnpm-lock.yaml ./
+RUN pnpm install --frozen-lockfile
+COPY . .
+RUN pnpm build
+
+FROM node:22-bookworm-slim
+WORKDIR /app
+RUN corepack enable
+COPY package.json pnpm-lock.yaml ./
+RUN pnpm install --frozen-lockfile --prod
+COPY --from=build /app/dist ./dist
+COPY --from=build /app/server/db/migrations ./server/db/migrations
+COPY --from=build /app/templates ./templates
+ENV SU_DB_PATH=/data/system-update.db
+ENV SU_REPORTS_DIR=/reports
+EXPOSE 8787
+CMD ["node", "dist/index.js"]

docker/docker-compose.yml

@@ -0,0 +1,17 @@
+services:
+  system-update:
+    build:
+      context: ..
+      dockerfile: docker/Dockerfile
+    ports:
+      - "8787:8787"
+    environment:
+      SU_MASTER_KEY: ${SU_MASTER_KEY:?définir SU_MASTER_KEY}
+    volumes:
+      - su-data:/data
+      - su-reports:/reports
+    restart: unless-stopped
+
+volumes:
+  su-data:
+  su-reports: