65 lines
1.6 KiB
Docker
65 lines
1.6 KiB
Docker
# Multi-stage build for production
|
|
FROM node:22-alpine AS base
|
|
|
|
# Install pnpm
|
|
RUN npm install -g pnpm
|
|
|
|
# Set working directory
|
|
WORKDIR /app
|
|
|
|
# Copy package files
|
|
COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
|
|
|
|
# Install dependencies
|
|
RUN pnpm install --frozen-lockfile
|
|
|
|
# Copy source code
|
|
COPY . .
|
|
|
|
# Build the application
|
|
RUN pnpm build
|
|
|
|
# Production stage
|
|
FROM node:22-alpine AS production
|
|
|
|
# Install pnpm
|
|
RUN npm install -g pnpm ts-node
|
|
|
|
# Set working directory
|
|
WORKDIR /app
|
|
|
|
# Copy package files
|
|
COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
|
|
|
|
# Install production dependencies only
|
|
RUN pnpm install --frozen-lockfile --prod
|
|
|
|
# Copy built application from base stage
|
|
COPY --from=base /app/dist ./dist
|
|
|
|
# Copy necessary files for runtime
|
|
COPY --from=base /app/src/server/index.ts ./src/server/index.ts
|
|
COPY --from=base /app/src/server/routes ./src/server/routes
|
|
COPY --from=base /app/src/server/rpc ./src/server/rpc
|
|
COPY --from=base /app/src/server/lib ./src/server/lib
|
|
COPY --from=base /app/tsconfig.server.json ./tsconfig.server.json
|
|
|
|
# Create non-root user for security
|
|
RUN addgroup -g 1001 -S nodejs
|
|
RUN adduser -S nextjs -u 1001
|
|
|
|
# Change ownership of the app directory
|
|
RUN chown -R nextjs:nodejs /app
|
|
USER nextjs
|
|
|
|
# Expose port
|
|
EXPOSE 3000
|
|
|
|
# Health check
|
|
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
|
|
CMD node -e "require('http').get('http://localhost:3000/health', (res) => { process.exit(res.statusCode === 200 ? 0 : 1) })" || exit 1
|
|
|
|
# Start the application with ts-node and dedicated tsconfig for NodeNext
|
|
ENV TS_NODE_PROJECT=tsconfig.server.json
|
|
CMD ["node", "--loader", "ts-node/esm", "src/server/index.ts"]
|