3 files changed, 156 insertions, 0 deletions

diff --git a/.containerignore b/.containerignore
new file mode 100644
index 0000000..7890d39
--- /dev/null
+++ b/.containerignore
@@ -0,0 +1,46 @@
+# Rust build artifacts (except the final binary)
+target/debug/
+target/*/incremental/
+target/*/deps/
+target/*/.fingerprint/
+target/*/build/
+target/doc/
+target/package/
+target/publish/
+target/install/
+
+# Rust source (not needed in container)
+src/
+Cargo.toml
+Cargo.lock
+
+# Git
+.git/
+.gitignore
+
+# IDE
+.vscode/
+.idea/
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Frontend dev dependencies
+frontend/node_modules/
+frontend/.turbo/
+
+# Logs
+*.log
+log.txt
+
+# Blob storage (should be mounted as volume)
+blobs/
+miei/
+
+# Development files
+tinyauth.sh
+flamegraph.svg
+write.lock
+README.md
+CLAUDE.md
\ No newline at end of file
diff --git a/CONTAINER.md b/CONTAINER.md
new file mode 100644
index 0000000..b87d65d
--- /dev/null
+++ b/CONTAINER.md
@@ -0,0 +1,76 @@
+# FCTDrive Container Deployment
+
+This document explains how to build and run the FCTDrive application as a container.
+
+## Prerequisites
+
+1. **Build the binaries locally first:**
+   ```bash
+   # Build the Rust CLI tool
+   just build  # or: cargo build --release --target-dir target/
+   
+   # Build the frontend (optional, done in container)
+   cd frontend && npm run build
+   ```
+
+2. **Container runtime** (podman, docker, etc.)
+
+## Building the Container
+
+```bash
+# Build the container image
+podman build -t fctdrive:latest .
+
+# Or with docker
+docker build -t fctdrive:latest .
+```
+
+## Running the Container
+
+```bash
+# Run with volumes for persistent data
+podman run -d \
+  --name fctdrive \
+  -p 3000:3000 \
+  -v ./blobs:/app/blobs:Z \
+  -v ./data:/app/data:Z \
+  -e TINYAUTH_ENDPOINT=http://localhost:3001 \
+  -e TINYAUTH_PUBLIC_ENDPOINT=http://localhost:3001 \
+  -e FCTDRIVE_PATH=/app/data \
+  fctdrive:latest
+```
+
+## Environment Variables
+
+- `TINYAUTH_ENDPOINT` - Internal TinyAuth server URL
+- `TINYAUTH_PUBLIC_ENDPOINT` - Public TinyAuth server URL (for browser redirects)
+- `FCTDRIVE_PATH` - Path to the drive data directory
+- `NODE_ENV=production` (set automatically)
+- `HOSTNAME=0.0.0.0` (set automatically)
+
+## Volume Mounts
+
+- `/app/blobs` - Blob storage directory
+- `/app/data` - Drive metadata/database directory
+
+## Container Features
+
+- **Base image**: Fedora 42
+- **Runtime**: Node.js + npm
+- **Binary**: Pre-built `fctdrive` binary in PATH
+- **User**: Non-root user `fctdrive`
+- **Port**: 3000 (Next.js server)
+- **Build**: Production Next.js build
+
+## Security
+
+- Runs as non-root user (`fctdrive:fctdrive`)
+- Only production dependencies installed
+- Minimal attack surface with focused .containerignore
+
+## Development vs Production
+
+This container is designed for production deployment. For development:
+- Use `just dev` for hot-reloading
+- Mount source code as volumes
+- Use development dependencies
\ No newline at end of file
diff --git a/Containerfile b/Containerfile
new file mode 100644
index 0000000..45b52a9
--- /dev/null
+++ b/Containerfile
@@ -0,0 +1,34 @@
+FROM fedora:42
+
+# Install Node.js and npm
+RUN dnf install -y nodejs npm && \
+    dnf clean all
+
+# Create app directory
+WORKDIR /app
+
+# Copy package files and install production dependencies only
+COPY frontend/package*.json ./
+RUN npm ci --only=production && \
+    npm cache clean --force
+
+# Copy the pre-built Next.js application
+COPY frontend/.next ./.next
+COPY frontend/public ./public
+COPY frontend/next.config.ts ./
+COPY frontend/package.json ./
+
+
+# Copy the built fctdrive binary to PATH
+COPY target/release/fctdrive /usr/local/bin/fctdrive
+RUN chmod +x /usr/local/bin/fctdrive
+
+# Expose port
+EXPOSE 3000
+
+# Set environment variables
+ENV NODE_ENV=production
+ENV HOSTNAME=0.0.0.0
+
+# Start the Next.js server
+CMD ["npm", "start"]