Redo frontend and dockerfile to use nginx and build in stages based on prod steps in romm

Dockerfile

@@ -1,9 +1,46 @@
-FROM cloudron/base:5.0.0@sha256:04fd70dbd8ad6149c19de39e35718e024417c3e01dc9c6637eaf4a41ec4e596c
-
-RUN mkdir -p /app/code
-WORKDIR /app/code
 ARG VERSION=4.5.0
 
+ARG ALPINE_VERSION=3.22
+ARG NODE_VERSION=20.19
+
+# FRONTEND BUILD
+FROM node:${NODE_VERSION}-trixie AS frontend-build
+ARG VERSION
+WORKDIR /front
+RUN wget "https://github.com/rommapp/romm/archive/refs/tags/${VERSION}.tar.gz" && \
+tar xfz ${VERSION}.tar.gz --strip-components=2 -C /front romm-${VERSION}/frontend && rm ${VERSION}.tar.gz
+RUN npm ci --ignore-scripts --no-audit --no-fund
+RUN npm run build
+
+# FETCH EMULATORJS AND RUFFLE
+FROM alpine:${ALPINE_VERSION} AS emulator-stage
+
+RUN apk add --no-cache \
+    7zip \
+    wget \
+    ca-certificates
+
+ARG EMULATORJS_VERSION=4.2.3
+ARG EMULATORJS_SHA256=07d451bc06fa3ad04ab30d9b94eb63ac34ad0babee52d60357b002bde8f3850b
+
+RUN wget "https://github.com/EmulatorJS/EmulatorJS/releases/download/v${EMULATORJS_VERSION}/${EMULATORJS_VERSION}.7z" && \
+    echo "${EMULATORJS_SHA256}  ${EMULATORJS_VERSION}.7z" | sha256sum -c - && \
+    7z x -y "${EMULATORJS_VERSION}.7z" -o/emulatorjs && \
+    rm -f "${EMULATORJS_VERSION}.7z"
+
+ARG RUFFLE_VERSION=nightly-2025-08-14
+ARG RUFFLE_FILE=ruffle-nightly-2025_08_14-web-selfhosted.zip
+ARG RUFFLE_SHA256=178870c5e7dd825a8df35920dfc5328d83e53f3c4d5d95f70b1ea9cd13494151
+
+RUN wget "https://github.com/ruffle-rs/ruffle/releases/download/${RUFFLE_VERSION}/${RUFFLE_FILE}" && \
+    echo "${RUFFLE_SHA256}  ${RUFFLE_FILE}" | sha256sum -c - && \
+    unzip -o "${RUFFLE_FILE}" -d /ruffle && \
+    rm -f "${RUFFLE_FILE}"
+
+FROM cloudron/base:5.0.0@sha256:04fd70dbd8ad6149c19de39e35718e024417c3e01dc9c6637eaf4a41ec4e596c as cloudron-builder
+
+ARG NJS_VERSION=0.9.4
+ARG MODZIP_VERSION=1.3.0
 # Prevent interactive prompts during installation
 ENV DEBIAN_FRONTEND=noninteractive
 
@@ -31,22 +68,19 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
     liblzma-dev \
     libncurses5-dev \
     libncursesw5-dev \
-    && apt-get clean \
-    && rm -rf /var/lib/apt/lists/*
+    nginx \
+    nginx-dev \
+    libpcre3-dev \
+    libssl-dev \
+    libxml2-dev \
+    libxslt-dev
 
-# Clone release
-RUN wget https://github.com/rommapp/romm/archive/refs/tags/$VERSION.tar.gz && \
-tar xfz $VERSION.tar.gz --strip-components=1 -C /app/code && rm $VERSION.tar.gz && rm -rf /app/code/backend/romm_test
+WORKDIR /
+RUN git clone -b ${NJS_VERSION} https://github.com/nginx/njs.git
+RUN git clone -b ${MODZIP_VERSION} https://github.com/evanmiller/mod_zip.git
 
-# Install nvm
-ENV NVM_DIR="/app/code/.nvm"
-RUN mkdir -p $NVM_DIR
-RUN curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.39.0/install.sh | bash \
-    && . "$NVM_DIR/nvm.sh" \
-    && nvm install 18.20.8 \
-    && nvm use 18.20.8 \
-    && nvm alias default 18.20.8
-ENV PATH="$NVM_DIR/versions/node/v18.20.8/bin:$PATH"
+WORKDIR /usr/share/nginx/src
+RUN ./configure --add-dynamic-module=/njs/nginx --add-dynamic-module=/mod_zip --with-compat --builddir=.  && make modules
 
 # Build and install RAHasher (optional for RA hashes)
 RUN git clone --recursive --branch 1.8.1 --depth 1 https://github.com/RetroAchievements/RALibretro.git /tmp/RALibretro
@@ -56,20 +90,59 @@ RUN sed -i '22a #include <ctime>' ./src/Util.h \
       ./src/libchdr/deps/zlib-1.3.1/gzlib.c \
       ./src/libchdr/deps/zlib-1.3.1/gzread.c \
       ./src/libchdr/deps/zlib-1.3.1/gzwrite.c \
-    && make HAVE_CHD=1 -f ./Makefile.RAHasher \
-    && cp ./bin64/RAHasher /usr/bin/RAHasher
-RUN rm -rf /tmp/RALibretro
+    && make HAVE_CHD=1 -f ./Makefile.RAHasher
 
-# Install frontend dependencies
-WORKDIR /app/code/frontend
-RUN npm install
-RUN ln -s /tmp/vite-temp /app/code/frontend/node_modules/.vite-temp && ln -s /tmp/vite /app/code/frontend/node_modules/.vite  && mkdir assets/romm &&  ln -s /app/data/assets /app/code/frontend/assets/romm/assets && ln -s /app/data/resources /app/code/frontend/assets/romm/resources
-COPY --from=docker.io/rommapp/romm:$VERSION /var/www/html/assets/emulatorjs /app/code/frontend/assets/emulatorjs
-COPY --from=docker.io/rommapp/romm:$VERSION /var/www/html/assets/ruffle /app/code/frontend/assets/ruffle
+# Main image starts here
+FROM cloudron/base:5.0.0@sha256:04fd70dbd8ad6149c19de39e35718e024417c3e01dc9c6637eaf4a41ec4e596c
+
+RUN mkdir -p /app/code
+WORKDIR /app/code
+ARG WEBSERVER_FOLDER=/app/code/frontend
+
+ARG UV_VERSION=0.8.24
+ARG VERSION
+
+# Prevent interactive prompts during installation
+ENV DEBIAN_FRONTEND=noninteractive
+
+# Install system dependencies
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    git \
+    libpq-dev \
+    libmariadb-dev \
+    curl \
+    ca-certificates \
+    7zip \
+    tzdata \
+    nginx \
+    && apt-get clean \
+    && rm -rf /var/lib/apt/lists/*
+
+# Clone release backend code
+RUN wget "https://github.com/rommapp/romm/archive/refs/tags/${VERSION}.tar.gz" && \
+tar xfz ${VERSION}.tar.gz --strip-components=1 -C /app/code romm-${VERSION}/backend romm-${VERSION}/pyproject.toml romm-${VERSION}/uv.lock && rm ${VERSION}.tar.gz
+
+# Install RAHasher into image
+COPY --from=cloudron-builder /tmp/RALibretro/bin64/RAHasher /usr/bin/RAHasher
+
+# Install frontend into image
+WORKDIR ${WEBSERVER_FOLDER}
+COPY --from=frontend-build /front/dist ${WEBSERVER_FOLDER}
+COPY --from=frontend-build /front/assets ${WEBSERVER_FOLDER}/assets
+COPY ./decode.js /etc/nginx/js/decode.js
+COPY ./nginx.conf /etc/nginx/nginx.conf
+COPY ./default.conf /etc/nginx/conf.d/default.conf
+COPY --from=cloudron-builder /usr/share/nginx/src/ngx_http_js_module.so /usr/lib/nginx/modules/
+COPY --from=cloudron-builder /usr/share/nginx/src/ngx_http_zip_module.so /usr/lib/nginx/modules/
+RUN mkdir -p assets/romm &&  ln -s /app/data/assets ${WEBSERVER_FOLDER}/assets/romm/assets && ln -s /app/data/resources ${WEBSERVER_FOLDER}/assets/romm/resources
+
+# Copy emulator to web folder
+COPY --from=emulator-stage /emulatorjs ${WEBSERVER_FOLDER}/assets/emulatorjs
+COPY --from=emulator-stage /ruffle ${WEBSERVER_FOLDER}/assets/ruffle
 
 WORKDIR /app/code/
 # Install uv for the non-root user
-COPY --from=ghcr.io/astral-sh/uv:0.7.19 /uv /uvx /usr/local/bin/
+COPY --from=ghcr.io/astral-sh/uv:$UV_VERSION /uv /uvx /usr/local/bin/
 
 # Install Python
 RUN mkdir /app/code/uv && uv python install -i /app/code/uv 3.13