73 lines
2.0 KiB
Docker
73 lines
2.0 KiB
Docker
# ===========================================
|
|
# iConsulting User Service Dockerfile
|
|
# ===========================================
|
|
|
|
# 构建阶段
|
|
FROM node:20-alpine AS builder
|
|
|
|
WORKDIR /app
|
|
|
|
# 安装 pnpm
|
|
RUN corepack enable && corepack prepare pnpm@latest --activate
|
|
|
|
# 复制 workspace 配置
|
|
COPY pnpm-workspace.yaml package.json pnpm-lock.yaml ./
|
|
COPY packages/shared/package.json ./packages/shared/
|
|
COPY packages/services/user-service/package.json ./packages/services/user-service/
|
|
|
|
# 安装依赖
|
|
RUN pnpm install --frozen-lockfile
|
|
|
|
# 复制源代码
|
|
COPY packages/shared ./packages/shared
|
|
COPY packages/services/user-service ./packages/services/user-service
|
|
COPY tsconfig.base.json ./
|
|
|
|
# 构建 shared
|
|
RUN pnpm --filter @iconsulting/shared build
|
|
|
|
# 构建服务
|
|
RUN pnpm --filter @iconsulting/user-service build
|
|
|
|
# 运行阶段
|
|
FROM node:20-alpine AS runner
|
|
|
|
WORKDIR /app
|
|
|
|
# 创建非 root 用户
|
|
RUN addgroup --system --gid 1001 nodejs && \
|
|
adduser --system --uid 1001 nestjs
|
|
|
|
# 复制构建产物和依赖配置
|
|
COPY --from=builder /app/packages/services/user-service/dist ./dist
|
|
COPY --from=builder /app/packages/services/user-service/package.json ./
|
|
|
|
# 复制 shared 包的构建产物 (因为依赖 workspace:*)
|
|
COPY --from=builder /app/packages/shared/dist ./node_modules/@iconsulting/shared/dist
|
|
COPY --from=builder /app/packages/shared/package.json ./node_modules/@iconsulting/shared/
|
|
|
|
# 移除 workspace: 协议依赖并安装生产依赖
|
|
# bcrypt 需要原生编译，安装编译工具
|
|
RUN apk add --no-cache jq python3 make g++ && \
|
|
jq 'del(.dependencies["@iconsulting/shared"])' package.json > package.tmp.json && \
|
|
mv package.tmp.json package.json && \
|
|
npm install --omit=dev && \
|
|
apk del python3 make g++
|
|
|
|
# 设置环境变量
|
|
ENV NODE_ENV=production
|
|
ENV PORT=3001
|
|
|
|
# 切换用户
|
|
USER nestjs
|
|
|
|
# 暴露端口
|
|
EXPOSE 3001
|
|
|
|
# 健康检查
|
|
HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
|
|
CMD wget --no-verbose --tries=1 --spider http://localhost:3001/health || exit 1
|
|
|
|
# 启动服务
|
|
CMD ["node", "dist/main.js"]
|