iconsulting/packages/services/user-service/Dockerfile

68 lines
1.8 KiB
Docker

# ===========================================
# iConsulting User Service Dockerfile
# ===========================================
# 构建阶段
FROM node:20-alpine AS builder
WORKDIR /app
# 安装 pnpm
RUN corepack enable && corepack prepare pnpm@latest --activate
# 复制 workspace 配置
COPY pnpm-workspace.yaml package.json pnpm-lock.yaml ./
COPY packages/shared/package.json ./packages/shared/
COPY packages/services/user-service/package.json ./packages/services/user-service/
# 安装依赖
RUN pnpm install --frozen-lockfile
# 复制源代码
COPY packages/shared ./packages/shared
COPY packages/services/user-service ./packages/services/user-service
COPY tsconfig.base.json ./
# 构建 shared
RUN pnpm --filter @iconsulting/shared build
# 构建服务
RUN pnpm --filter @iconsulting/user-service build
# 运行阶段
FROM node:20-alpine AS runner
WORKDIR /app
# 创建非 root 用户
RUN addgroup --system --gid 1001 nodejs && \
adduser --system --uid 1001 nestjs
# 复制构建产物和依赖配置
COPY --from=builder /app/packages/services/user-service/dist ./dist
COPY --from=builder /app/packages/services/user-service/package.json ./
# 复制 shared 包的构建产物 (因为依赖 workspace:*)
COPY --from=builder /app/packages/shared/dist ./node_modules/@iconsulting/shared/dist
COPY --from=builder /app/packages/shared/package.json ./node_modules/@iconsulting/shared/
# 移除 workspace: 协议依赖并安装生产依赖
RUN sed -i '/@iconsulting/d' package.json && npm install --omit=dev --ignore-scripts
# 设置环境变量
ENV NODE_ENV=production
ENV PORT=3001
# 切换用户
USER nestjs
# 暴露端口
EXPOSE 3001
# 健康检查
HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
CMD wget --no-verbose --tries=1 --spider http://localhost:3001/health || exit 1
# 启动服务
CMD ["node", "dist/main.js"]