feat(games): add whopixels hosting at whopxl.mana.how

Dockerfile, docker-compose service (port 5100), Caddy and cloudflared
routing for the WhoPixels game. PORT is now configurable via env var.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

apps/calendar/apps/backend/Dockerfile

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1
 # Build stage
 FROM node:20-alpine AS builder
 
@@ -28,7 +29,7 @@ COPY apps/calendar/packages ./apps/calendar/packages
 COPY apps/calendar/apps/backend ./apps/calendar/apps/backend
 
 # Install dependencies (ignore scripts since generate-env.mjs isn't in Docker context)
-RUN pnpm install --frozen-lockfile --ignore-scripts
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store pnpm install --frozen-lockfile --ignore-scripts
 
 # Build shared packages first (in dependency order)
 WORKDIR /app/packages/shared-errors

apps/calendar/apps/web/Dockerfile

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1
 # Build stage
 FROM node:20-alpine AS builder
 
@@ -53,7 +54,7 @@ COPY apps/calendar/packages ./apps/calendar/packages
 COPY apps/calendar/apps/web ./apps/calendar/apps/web
 
 # Install dependencies
-RUN pnpm install --frozen-lockfile
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store pnpm install --frozen-lockfile
 
 # Build shared packages that need building
 WORKDIR /app/packages/shared-vite-config

apps/chat/apps/backend/Dockerfile

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1
 # Build stage
 FROM node:20-alpine AS builder
 
@@ -29,7 +30,7 @@ COPY packages/shared-tsconfig ./packages/shared-tsconfig
 COPY apps/chat/apps/backend ./apps/chat/apps/backend
 
 # Install dependencies (ignore scripts since generate-env.mjs isn't in Docker context)
-RUN pnpm install --frozen-lockfile --ignore-scripts
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store pnpm install --frozen-lockfile --ignore-scripts
 
 # Build shared packages first (in dependency order)
 WORKDIR /app/packages/shared-errors

apps/chat/apps/web/Dockerfile

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1
 # Build stage
 FROM node:20-alpine AS builder
 
@@ -46,7 +47,7 @@ COPY apps/chat/packages ./apps/chat/packages
 COPY apps/chat/apps/web ./apps/chat/apps/web
 
 # Install dependencies
-RUN pnpm install --frozen-lockfile
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store pnpm install --frozen-lockfile
 
 # Build shared packages that need building
 WORKDIR /app/packages/shared-vite-config

apps/clock/apps/backend/Dockerfile

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1
 # Build stage
 FROM node:20-alpine AS builder
 
@@ -27,7 +28,7 @@ COPY apps/clock/packages ./apps/clock/packages
 COPY apps/clock/apps/backend ./apps/clock/apps/backend
 
 # Install dependencies (ignore scripts since generate-env.mjs isn't in Docker context)
-RUN pnpm install --frozen-lockfile --ignore-scripts
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store pnpm install --frozen-lockfile --ignore-scripts
 
 # Build shared packages first (in dependency order)
 WORKDIR /app/packages/shared-errors

apps/clock/apps/web/Dockerfile

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1
 # Build stage
 FROM node:20-alpine AS builder
 
@@ -46,7 +47,7 @@ COPY apps/clock/packages ./apps/clock/packages
 COPY apps/clock/apps/web ./apps/clock/apps/web
 
 # Install dependencies
-RUN pnpm install --frozen-lockfile
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store pnpm install --frozen-lockfile
 
 # Build shared packages that need building
 WORKDIR /app/packages/shared-vite-config

apps/contacts/apps/backend/Dockerfile

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1
 # Build stage
 FROM node:20-alpine AS builder
 
@@ -26,7 +27,7 @@ COPY packages/shared-tsconfig ./packages/shared-tsconfig
 COPY apps/contacts/apps/backend ./apps/contacts/apps/backend
 
 # Install dependencies (ignore scripts since generate-env.mjs isn't in Docker context)
-RUN pnpm install --frozen-lockfile --ignore-scripts
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store pnpm install --frozen-lockfile --ignore-scripts
 
 # Build shared packages first (in dependency order)
 WORKDIR /app/packages/shared-errors

apps/contacts/apps/web/Dockerfile

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1
 # Build stage
 FROM node:20-alpine AS builder
 
@@ -50,7 +51,7 @@ COPY packages/shared-stores ./packages/shared-stores
 COPY apps/contacts/apps/web ./apps/contacts/apps/web
 
 # Install dependencies
-RUN pnpm install --frozen-lockfile
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store pnpm install --frozen-lockfile
 
 # Build shared packages that need building
 WORKDIR /app/packages/shared-vite-config

apps/manacore/apps/web/Dockerfile

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1
 # Build stage
 FROM node:20-alpine AS builder
 
@@ -48,7 +49,7 @@ COPY packages/wallpaper-generator ./packages/wallpaper-generator
 COPY apps/manacore/apps/web ./apps/manacore/apps/web
 
 # Install dependencies
-RUN pnpm install --frozen-lockfile
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store pnpm install --frozen-lockfile
 
 # Build shared packages that need building
 WORKDIR /app/packages/shared-vite-config

apps/manadeck/apps/backend/Dockerfile

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1
 # Build stage
 FROM node:20-alpine AS builder
 
@@ -26,7 +27,7 @@ COPY packages/shared-nestjs-setup ./packages/shared-nestjs-setup
 COPY apps/manadeck/apps/backend ./apps/manadeck/apps/backend
 
 # Install dependencies (ignore scripts since generate-env.mjs isn't in Docker context)
-RUN pnpm install --frozen-lockfile --ignore-scripts
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store pnpm install --frozen-lockfile --ignore-scripts
 
 # Build shared packages first (in dependency order)
 WORKDIR /app/packages/shared-errors

apps/matrix/apps/web/Dockerfile

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1
 # Build stage
 FROM node:20-alpine AS builder
 
@@ -34,7 +35,7 @@ COPY packages/shared-utils ./packages/shared-utils
 COPY apps/matrix/apps/web ./apps/matrix/apps/web
 
 # Install dependencies (--no-frozen-lockfile due to workspace overrides)
-RUN pnpm install --no-frozen-lockfile
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store pnpm install --no-frozen-lockfile
 
 # Build shared packages that need building
 WORKDIR /app/packages/shared-auth

apps/mukke/apps/backend/Dockerfile

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1
 # Build stage
 FROM node:20-alpine AS builder
 
@@ -28,7 +29,7 @@ COPY apps/mukke/packages ./apps/mukke/packages
 COPY apps/mukke/apps/backend ./apps/mukke/apps/backend
 
 # Install dependencies
-RUN pnpm install --frozen-lockfile --ignore-scripts
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store pnpm install --frozen-lockfile --ignore-scripts
 
 # Build shared packages
 WORKDIR /app/packages/shared-errors

apps/mukke/apps/web/Dockerfile

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1
 # Build stage
 FROM node:20-alpine AS builder
 
@@ -49,7 +50,7 @@ COPY apps/mukke/packages ./apps/mukke/packages
 COPY apps/mukke/apps/web ./apps/mukke/apps/web
 
 # Install dependencies
-RUN pnpm install --frozen-lockfile
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store pnpm install --frozen-lockfile
 
 # Build shared packages that need building
 WORKDIR /app/packages/shared-vite-config

apps/nutriphi/apps/backend/Dockerfile

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1
 # Build stage
 FROM node:20-alpine AS builder
 
@@ -26,7 +27,7 @@ COPY apps/nutriphi/packages ./apps/nutriphi/packages
 COPY apps/nutriphi/apps/backend ./apps/nutriphi/apps/backend
 
 # Install dependencies (ignore scripts since generate-env.mjs isn't in Docker context)
-RUN pnpm install --frozen-lockfile --ignore-scripts
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store pnpm install --frozen-lockfile --ignore-scripts
 
 # Build shared packages first
 WORKDIR /app/packages/shared-nestjs-auth

apps/nutriphi/apps/web/Dockerfile

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1
 # Build stage
 FROM node:20-alpine AS builder
 
@@ -46,7 +47,7 @@ COPY apps/nutriphi/packages ./apps/nutriphi/packages
 COPY apps/nutriphi/apps/web ./apps/nutriphi/apps/web
 
 # Install dependencies
-RUN pnpm install --frozen-lockfile
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store pnpm install --frozen-lockfile
 
 # Build shared packages that need building
 WORKDIR /app/packages/shared-auth

apps/photos/apps/backend/Dockerfile

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1
 # Build stage
 FROM node:20-alpine AS builder
 
@@ -29,7 +30,7 @@ COPY apps/photos/packages/shared ./apps/photos/packages/shared
 COPY apps/photos/apps/backend ./apps/photos/apps/backend
 
 # Install dependencies (ignore scripts since generate-env.mjs isn't in Docker context)
-RUN pnpm install --frozen-lockfile --ignore-scripts
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store pnpm install --frozen-lockfile --ignore-scripts
 
 # Build shared packages first (in dependency order)
 WORKDIR /app/packages/shared-errors

apps/photos/apps/web/Dockerfile

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1
 # Build stage
 FROM node:20-alpine AS builder
 
@@ -55,7 +56,7 @@ COPY apps/photos/packages/shared ./apps/photos/packages/shared
 COPY apps/photos/apps/web ./apps/photos/apps/web
 
 # Install dependencies
-RUN pnpm install --frozen-lockfile
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store pnpm install --frozen-lockfile
 
 # Build shared packages that need building
 WORKDIR /app/packages/shared-vite-config

apps/picture/apps/backend/Dockerfile

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1
 # Build stage
 FROM node:20-alpine AS builder
 
@@ -28,7 +29,7 @@ COPY packages/shared-nestjs-setup ./packages/shared-nestjs-setup
 COPY apps/picture/apps/backend ./apps/picture/apps/backend
 
 # Install dependencies (ignore scripts since generate-env.mjs isn't in Docker context)
-RUN pnpm install --frozen-lockfile --ignore-scripts
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store pnpm install --frozen-lockfile --ignore-scripts
 
 # Build shared packages first (in dependency order)
 WORKDIR /app/packages/shared-errors

apps/picture/apps/web/Dockerfile

@@ -0,0 +1,97 @@
+# syntax=docker/dockerfile:1
+# Build stage
+FROM node:20-alpine AS builder
+
+# Build arguments for SvelteKit static env vars
+ARG PUBLIC_BACKEND_URL=http://picture-backend:3040
+ARG PUBLIC_MANA_CORE_AUTH_URL=http://mana-core-auth:3001
+
+# Set as environment variables for build
+ENV PUBLIC_BACKEND_URL=$PUBLIC_BACKEND_URL
+ENV PUBLIC_MANA_CORE_AUTH_URL=$PUBLIC_MANA_CORE_AUTH_URL
+
+# Install pnpm
+RUN corepack enable && corepack prepare pnpm@9.15.0 --activate
+
+WORKDIR /app
+
+# Copy root workspace files
+COPY pnpm-workspace.yaml ./
+COPY package.json ./
+COPY pnpm-lock.yaml ./
+
+# Copy shared packages needed by picture web
+COPY packages/shared-types ./packages/shared-types
+COPY packages/shared-auth ./packages/shared-auth
+COPY packages/shared-auth-ui ./packages/shared-auth-ui
+COPY packages/shared-branding ./packages/shared-branding
+COPY packages/shared-feedback-service ./packages/shared-feedback-service
+COPY packages/shared-feedback-types ./packages/shared-feedback-types
+COPY packages/shared-feedback-ui ./packages/shared-feedback-ui
+COPY packages/shared-i18n ./packages/shared-i18n
+COPY packages/shared-icons ./packages/shared-icons
+COPY packages/shared-tailwind ./packages/shared-tailwind
+COPY packages/shared-theme ./packages/shared-theme
+COPY packages/shared-theme-ui ./packages/shared-theme-ui
+COPY packages/shared-subscription-types ./packages/shared-subscription-types
+COPY packages/shared-subscription-ui ./packages/shared-subscription-ui
+COPY packages/shared-profile-ui ./packages/shared-profile-ui
+COPY packages/shared-ui ./packages/shared-ui
+COPY packages/shared-utils ./packages/shared-utils
+COPY packages/shared-vite-config ./packages/shared-vite-config
+COPY packages/shared-api-client ./packages/shared-api-client
+COPY packages/shared-stores ./packages/shared-stores
+COPY packages/shared-pwa ./packages/shared-pwa
+
+# Copy picture packages
+COPY apps/picture/packages/shared ./apps/picture/packages/shared
+COPY apps/picture/packages/design-tokens ./apps/picture/packages/design-tokens
+
+# Copy picture web
+COPY apps/picture/apps/web ./apps/picture/apps/web
+
+# Install dependencies
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store pnpm install --frozen-lockfile
+
+# Build shared packages that need building
+WORKDIR /app/packages/shared-vite-config
+RUN pnpm build
+
+WORKDIR /app/packages/shared-auth
+RUN pnpm build || true
+
+# Build the web app
+WORKDIR /app/apps/picture/apps/web
+RUN pnpm exec svelte-kit sync
+RUN pnpm build
+
+# Production stage
+FROM node:20-alpine AS production
+
+# Keep same directory structure as builder so pnpm symlinks resolve correctly
+WORKDIR /app/apps/picture/apps/web
+
+# Copy the pnpm store that symlinks point to (at /app/node_modules/.pnpm)
+COPY --from=builder /app/node_modules/.pnpm /app/node_modules/.pnpm
+
+# Copy the app's node_modules (contains symlinks to the pnpm store)
+COPY --from=builder /app/apps/picture/apps/web/node_modules ./node_modules
+
+# Copy built application
+COPY --from=builder /app/apps/picture/apps/web/build ./build
+COPY --from=builder /app/apps/picture/apps/web/package.json ./
+
+# Expose port
+EXPOSE 5021
+
+# Set environment variables
+ENV NODE_ENV=production
+ENV PORT=5021
+ENV HOST=0.0.0.0
+
+# Health check
+HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
+  CMD wget --no-verbose --tries=1 --spider http://localhost:5021/health || exit 1
+
+# Run the app
+CMD ["node", "build"]

apps/planta/apps/backend/Dockerfile

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1
 # Build stage
 FROM node:20-alpine AS builder
 
@@ -28,7 +29,7 @@ COPY apps/planta/packages ./apps/planta/packages
 COPY apps/planta/apps/backend ./apps/planta/apps/backend
 
 # Install dependencies (ignore scripts since generate-env.mjs isn't in Docker context)
-RUN pnpm install --frozen-lockfile --ignore-scripts
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store pnpm install --frozen-lockfile --ignore-scripts
 
 # Build shared packages first (in dependency order)
 WORKDIR /app/packages/shared-errors

apps/presi/apps/backend/Dockerfile

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1
 # Build stage
 FROM node:20-alpine AS builder
 
@@ -27,7 +28,7 @@ COPY apps/presi/packages ./apps/presi/packages
 COPY apps/presi/apps/backend ./apps/presi/apps/backend
 
 # Install dependencies (ignore scripts since generate-env.mjs isn't in Docker context)
-RUN pnpm install --frozen-lockfile --ignore-scripts
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store pnpm install --frozen-lockfile --ignore-scripts
 
 # Build shared packages first (in dependency order)
 WORKDIR /app/packages/shared-errors

apps/presi/apps/web/Dockerfile

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1
 # Build stage
 FROM node:20-alpine AS builder
 
@@ -45,7 +46,7 @@ COPY packages/shared-utils ./packages/shared-utils
 COPY apps/presi/apps/web ./apps/presi/apps/web
 
 # Install dependencies
-RUN pnpm install --frozen-lockfile
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store pnpm install --frozen-lockfile
 
 # Build shared packages that need building
 WORKDIR /app/packages/shared-auth

apps/skilltree/apps/backend/Dockerfile

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1
 # Build stage
 FROM node:20-alpine AS builder
 
@@ -26,7 +27,7 @@ COPY packages/shared-tsconfig ./packages/shared-tsconfig
 COPY apps/skilltree/apps/backend ./apps/skilltree/apps/backend
 
 # Install dependencies (ignore scripts since generate-env.mjs isn't in Docker context)
-RUN pnpm install --frozen-lockfile --ignore-scripts
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store pnpm install --frozen-lockfile --ignore-scripts
 
 # Build shared packages first (in dependency order)
 WORKDIR /app/packages/shared-errors

apps/skilltree/apps/web/Dockerfile

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1
 # Build stage
 FROM node:20-alpine AS builder
 
@@ -36,7 +37,7 @@ COPY packages/shared-api-client ./packages/shared-api-client
 COPY apps/skilltree/apps/web ./apps/skilltree/apps/web
 
 # Install dependencies
-RUN pnpm install --frozen-lockfile
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store pnpm install --frozen-lockfile
 
 # Build shared packages that need building
 WORKDIR /app/packages/shared-vite-config

apps/storage/apps/backend/Dockerfile

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1
 # Build stage
 FROM node:20-alpine AS builder
 
@@ -26,7 +27,7 @@ COPY packages/shared-nestjs-setup ./packages/shared-nestjs-setup
 COPY apps/storage/apps/backend ./apps/storage/apps/backend
 
 # Install dependencies (ignore scripts since generate-env.mjs isn't in Docker context)
-RUN pnpm install --frozen-lockfile --ignore-scripts
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store pnpm install --frozen-lockfile --ignore-scripts
 
 # Build shared packages first (in dependency order)
 WORKDIR /app/packages/shared-errors

apps/storage/apps/web/Dockerfile

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1
 # Build stage
 FROM node:20-alpine AS builder
 
@@ -48,7 +49,7 @@ COPY packages/shared-vite-config ./packages/shared-vite-config
 COPY apps/storage/apps/web ./apps/storage/apps/web
 
 # Install dependencies
-RUN pnpm install --frozen-lockfile
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store pnpm install --frozen-lockfile
 
 # Build shared packages that need building
 WORKDIR /app/packages/shared-vite-config

apps/todo/apps/backend/Dockerfile

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1
 # Build stage
 FROM node:20-alpine AS builder
 
@@ -28,7 +29,7 @@ COPY apps/todo/packages ./apps/todo/packages
 COPY apps/todo/apps/backend ./apps/todo/apps/backend
 
 # Install dependencies (ignore scripts since generate-env.mjs isn't in Docker context)
-RUN pnpm install --frozen-lockfile --ignore-scripts
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store pnpm install --frozen-lockfile --ignore-scripts
 
 # Build shared packages first (in dependency order)
 WORKDIR /app/packages/shared-errors

apps/todo/apps/web/Dockerfile

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1
 # Build stage
 FROM node:20-alpine AS builder
 
@@ -50,7 +51,7 @@ COPY apps/todo/packages ./apps/todo/packages
 COPY apps/todo/apps/web ./apps/todo/apps/web
 
 # Install dependencies
-RUN pnpm install --frozen-lockfile
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store pnpm install --frozen-lockfile
 
 # Build shared packages that need building
 WORKDIR /app/packages/shared-vite-config

apps/zitare/apps/backend/Dockerfile

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1
 # Build stage
 FROM node:20-alpine AS builder
 
@@ -29,7 +30,7 @@ COPY apps/zitare/packages/content ./apps/zitare/packages/content
 COPY apps/zitare/apps/backend ./apps/zitare/apps/backend
 
 # Install dependencies (ignore scripts since generate-env.mjs isn't in Docker context)
-RUN pnpm install --frozen-lockfile --ignore-scripts
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store pnpm install --frozen-lockfile --ignore-scripts
 
 # Build shared packages first (in dependency order)
 WORKDIR /app/packages/shared-errors

apps/zitare/apps/web/Dockerfile

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1
 # Build stage
 FROM node:20-alpine AS builder
 
@@ -49,7 +50,7 @@ COPY apps/zitare/packages/content ./apps/zitare/packages/content
 COPY apps/zitare/apps/web ./apps/zitare/apps/web
 
 # Install dependencies
-RUN pnpm install --frozen-lockfile
+RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store pnpm install --frozen-lockfile
 
 # Build shared packages that need building
 WORKDIR /app/packages/shared-vite-config