sub2api-dashboard/Dockerfile at main · CrossStar/sub2api-dashboard · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
# syntax=docker/dockerfile:1.7
FROM node:22-bookworm-slim AS base
ENV PNPM_HOME=/pnpm
ENV PATH=$PNPM_HOME:$PATH
RUN corepack enable && corepack prepare pnpm@10.11.0 --activate
WORKDIR /app

FROM base AS deps
COPY package.json pnpm-lock.yaml pnpm-workspace.yaml .npmrc ./
COPY apps/server/package.json apps/server/package.json
COPY apps/web/package.json apps/web/package.json
COPY packages/contracts/package.json packages/contracts/package.json
RUN pnpm install --frozen-lockfile

FROM deps AS build
COPY tsconfig*.json eslint.config.mjs vitest.config.ts ./
COPY packages/contracts packages/contracts
COPY apps/web apps/web
COPY apps/server apps/server
RUN pnpm --filter @sub2api/contracts build \
 && pnpm --filter @sub2api/web build \
 && pnpm --filter @sub2api/server build \
 && pnpm deploy --legacy --filter @sub2api/server --prod /runtime

FROM node:22-bookworm-slim AS runtime
ENV NODE_ENV=production
ENV HOST=0.0.0.0
ENV PORT=3000
ENV WEB_DIST=/app/web
WORKDIR /app
RUN groupadd --system --gid 10001 sub2api \
 && useradd --system --uid 10001 --gid sub2api --home-dir /nonexistent --shell /usr/sbin/nologin sub2api
COPY --from=build --chown=sub2api:sub2api /runtime ./server
COPY --from=build --chown=sub2api:sub2api /app/apps/web/dist ./web
USER sub2api
EXPOSE 3000
HEALTHCHECK --interval=30s --timeout=3s --start-period=10s --retries=3 \
  CMD node -e "fetch('http://127.0.0.1:3000/health/live').then(r=>{if(!r.ok)process.exit(1)}).catch(()=>process.exit(1))"
STOPSIGNAL SIGTERM
CMD ["node", "server/dist/src/main.js"]