Deployment Guide for Next.js Application useing Docker on Hostinger VPS

ssh root@your-vps-ip
sudo apt update && sudo apt upgrade -y

# Docker & Compose
curl -fsSL https://get.docker.com | bash
apt install docker-compose-plugin -y

# Git
apt install git -y

# Firewall
ufw allow OpenSSH
ufw allow 80,443/tcp
ufw enable

mkdir -p /srv/apps/traefik/dynamic
cd /srv/apps/traefik

entryPoints:
  web:
    address: ":80"
    http:
      redirections:
        entryPoint:
          to: websecure
          scheme: https
  websecure:
    address: ":443"

providers:
  docker:
    exposedByDefault: false

certificatesResolvers:
  letsencrypt:
    acme:
      email: admin@example.com
      storage: /acme.json
      httpChallenge:
        entryPoint: web

networks:
  proxy:
    external: true

services:
  traefik:
    image: traefik:v3.0
    container_name: traefik
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./traefik.yml:/traefik.yml:ro
      - ./dynamic:/dynamic
      - ./acme.json:/acme.json
    networks:
      - proxy

touch acme.json && chmod 600 acme.json
docker network create proxy
docker compose up -d

mkdir -p ~/srv/apps && cd ~/srv/apps
git clone git@github.com:yourusername/your-next-app.git
cd your-next-app

ssh-keygen -t ed25519 -C "your_email@example.com"
cat ~/.ssh/id_ed25519.pub

nano .env

# ---- Build stage ----
FROM node:20-alpine AS builder
WORKDIR /app

# build-time flag (default 1 to skip DB calls)
ARG SKIP_DB=1
ENV SKIP_DB=$SKIP_DB
ENV NEXT_TELEMETRY_DISABLED=1

COPY package*.json ./
RUN npm ci
COPY . .
RUN npm run build

# ---- Production runtime ----
FROM node:20-alpine
WORKDIR /app

ENV NODE_ENV=production
ENV NEXT_TELEMETRY_DISABLED=1
ENV PORT=3000
ENV HOSTNAME=0.0.0.0

COPY --from=builder /app/public ./public
COPY --from=builder /app/.next ./.next
COPY --from=builder /app/node_modules ./node_modules
COPY --from=builder /app/package*.json ./

EXPOSE 3000
CMD ["npm", "start"]

import type { NextConfig } from "next";

const nextConfig: NextConfig = {
  output: "standalone",
};

export default nextConfig;

node_modules
.next
.git
Dockerfile
docker-compose.yml
README.md

networks:
  proxy:
    external: true
  appnet:
    external: true

services:
  next-app:
    build:
      context: .
      dockerfile: ./Dockerfile

    container_name: next-app

    env_file:
      - ./.env
    environment:
      - NODE_ENV=production
      - PORT=3000
      - NEXT_TELEMETRY_DISABLED=1

    expose:
      - "3000"

    healthcheck:
      test: ["CMD-SHELL", "wget -q --spider http://localhost:3000/ || exit 1"]
      interval: 30s
      timeout: 5s
      retries: 5
      start_period: 20s

    restart: unless-stopped

    networks:
      - proxy
      - appnet

    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=proxy"

      # Apex domain
      - "traefik.http.routers.naturalsefa.rule=Host(`naturalsefaa.com`)"
      - "traefik.http.routers.naturalsefa.entrypoints=websecure"
      - "traefik.http.routers.naturalsefa.tls.certresolver=letsencrypt"
      - "traefik.http.services.naturalsefa.loadbalancer.server.port=3000"

      # www → apex redirect (HTTPS)
      - "traefik.http.routers.naturalsefa-www.rule=Host(`www.naturalsefaa.com`)"
      - "traefik.http.routers.naturalsefa-www.entrypoints=websecure"
      - "traefik.http.routers.naturalsefa-www.tls.certresolver=letsencrypt"
      - "traefik.http.routers.naturalsefa-www.middlewares=redirect-to-apex@docker"
      - "traefik.http.middlewares.redirect-to-apex.redirectregex.regex=^https?://www\\.naturalsefaa\\.com/(.*)"
      - "traefik.http.middlewares.redirect-to-apex.redirectregex.replacement=https://naturalsefaa.com/$$1"
      - "traefik.http.middlewares.redirect-to-apex.redirectregex.permanent=true"

cd /srv/apps/portfolio-next
docker compose up -d --build

cd /srv/apps/portfolio-next
git pull origin main
docker compose build
docker compose up -d