From 072ca040bb11b5b9349ed9c3c7cd3f724820a392 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Reinhard=20X=2E=20F=C3=BCrst?= <rexfue@gmail.com>
Date: Fri, 5 Jun 2026 15:18:15 +0200
Subject: [PATCH] =?UTF-8?q?fix:=20.env=20nicht=20ins=20Docker-Image=20?=
 =?UTF-8?q?=E2=80=94=20Variablen=20kommen=20aus=20Compose/ENV?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

.dockerignore schließt .env aus dem Build-Kontext aus. Next.js
standalone hat dadurch keine eingebettete .env mehr und liest
Variablen sauber aus process.env (gesetzt via docker-compose
environment:). NEXT_PUBLIC_FAHRKOSTEN_SATZ bleibt als Build-ARG
verfügbar (Default 15). BACKUP_SSH_KEY_FILE default /dev/null
damit Compose auch ohne Backup-Konfiguration startet.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .dockerignore           | 7 +++++++
 Dockerfile              | 2 ++
 docker-compose.prod.yml | 6 ++++--
 3 files changed, 13 insertions(+), 2 deletions(-)
 create mode 100644 .dockerignore

diff --git a/.dockerignore b/.dockerignore
new file mode 100644
index 0000000..e2a23cf
--- /dev/null
+++ b/.dockerignore
@@ -0,0 +1,7 @@
+.env
+.env.*
+.git
+.gitignore
+node_modules
+.next
+*.md
diff --git a/Dockerfile b/Dockerfile
index 477e1e4..7274fe3 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -12,7 +12,9 @@ COPY --from=deps /app/node_modules ./node_modules
 COPY . .
 
 ARG BUILD_DATE
+ARG NEXT_PUBLIC_FAHRKOSTEN_SATZ=15
 ENV NEXT_PUBLIC_BUILD_DATE=${BUILD_DATE}
+ENV NEXT_PUBLIC_FAHRKOSTEN_SATZ=${NEXT_PUBLIC_FAHRKOSTEN_SATZ}
 ENV NEXT_TELEMETRY_DISABLED=1
 
 RUN npm run build
diff --git a/docker-compose.prod.yml b/docker-compose.prod.yml
index 3f4bf14..d8b3503 100644
--- a/docker-compose.prod.yml
+++ b/docker-compose.prod.yml
@@ -47,11 +47,13 @@ services:
       DB_PASS: ${DB_PASS}
       DB_NAME: ${DB_NAME}
       AUTH_SECRET: ${AUTH_SECRET}
+      DEFAULT_PASSWORD: ${DEFAULT_PASSWORD}
+      NEXT_PUBLIC_FAHRKOSTEN_SATZ: ${NEXT_PUBLIC_FAHRKOSTEN_SATZ:-15}
       NODE_ENV: production
-      BACKUP_SSH_URL: ${BACKUP_SSH_URL}
+      BACKUP_SSH_URL: ${BACKUP_SSH_URL:-}
       BACKUP_SSH_KEY_PATH: /run/secrets/backup_ssh_key
     volumes:
-      - ${BACKUP_SSH_KEY_FILE}:/run/secrets/backup_ssh_key:ro
+      - ${BACKUP_SSH_KEY_FILE:-/dev/null}:/run/secrets/backup_ssh_key:ro
     ports:
       - "127.0.0.1:${APP_PORT:-3000}:3000"
     depends_on: