46 lines
1.4 KiB
Docker
46 lines
1.4 KiB
Docker
# ── Build stage ──────────────────────────────────────────────────────────────
|
|
FROM node:20-alpine AS builder
|
|
|
|
# Install OpenSSL for Prisma client generation
|
|
RUN apk add --no-cache openssl
|
|
|
|
WORKDIR /app
|
|
|
|
# Install all dependencies (including devDependencies needed for build)
|
|
COPY package*.json ./
|
|
RUN npm ci
|
|
|
|
# Generate Prisma client and compile TypeScript
|
|
COPY prisma ./prisma/
|
|
RUN npx prisma generate
|
|
|
|
COPY . .
|
|
RUN npm run build
|
|
|
|
# ── Production stage ──────────────────────────────────────────────────────────
|
|
FROM node:20-alpine AS production
|
|
|
|
# Install OpenSSL required by Prisma at runtime
|
|
RUN apk add --no-cache openssl
|
|
|
|
WORKDIR /app
|
|
|
|
# Install production dependencies only
|
|
COPY package*.json ./
|
|
RUN npm ci --omit=dev
|
|
|
|
# Copy Prisma schema + generated client from builder
|
|
COPY --from=builder /app/prisma ./prisma
|
|
COPY --from=builder /app/node_modules/.prisma ./node_modules/.prisma
|
|
|
|
# Copy compiled application
|
|
COPY --from=builder /app/dist ./dist
|
|
|
|
# Run as non-root user (numeric UID required by Kubernetes runAsNonRoot)
|
|
RUN addgroup -S -g 1001 appgroup && adduser -S -u 1001 -G appgroup appuser
|
|
USER 1001
|
|
|
|
EXPOSE 3001
|
|
|
|
CMD ["sh", "-c", "npx prisma migrate deploy && node dist/index.js"]
|