40 lines
766 B
Docker
40 lines
766 B
Docker
# 多阶段构建
|
|
FROM node:20-alpine AS builder
|
|
|
|
WORKDIR /app
|
|
|
|
# 复制依赖文件
|
|
COPY package*.json ./
|
|
RUN npm ci --only=production
|
|
|
|
# 生产阶段
|
|
FROM node:20-alpine
|
|
|
|
WORKDIR /app
|
|
|
|
# 安装必要工具（健康检查用）
|
|
RUN apk add --no-cache wget
|
|
|
|
# 创建非 root 用户
|
|
RUN addgroup -g 1001 -S nodejs && \
|
|
adduser -S app -u 1001
|
|
|
|
# 复制依赖
|
|
COPY --from=builder --chown=app:nodejs /app/node_modules ./node_modules
|
|
|
|
# 复制应用代码
|
|
COPY --chown=app:nodejs . .
|
|
|
|
# 切换到非 root 用户
|
|
USER app
|
|
|
|
# 暴露端口
|
|
EXPOSE 3000
|
|
|
|
# 健康检查
|
|
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
|
|
CMD wget --quiet --tries=1 --spider http://localhost:${PORT:-3000}/health || exit 1
|
|
|
|
# 启动应用
|
|
CMD ["node", "server.js"]
|