This commit is contained in:
39
Dockerfile
39
Dockerfile
@@ -33,3 +33,42 @@ EXPOSE 3000
|
|||||||
|
|
||||||
# Default command
|
# Default command
|
||||||
CMD ["bun", "run", "dev"]
|
CMD ["bun", "run", "dev"]
|
||||||
|
|
||||||
|
# ============================================
|
||||||
|
# Builder stage - copies source for production
|
||||||
|
# ============================================
|
||||||
|
FROM base AS builder
|
||||||
|
|
||||||
|
# Copy dependencies from deps stage
|
||||||
|
COPY --from=deps /app/node_modules ./node_modules
|
||||||
|
|
||||||
|
# Copy source code
|
||||||
|
COPY . .
|
||||||
|
|
||||||
|
# ============================================
|
||||||
|
# Production stage - minimal runtime image
|
||||||
|
# ============================================
|
||||||
|
FROM oven/bun:latest AS production
|
||||||
|
WORKDIR /app
|
||||||
|
|
||||||
|
# Copy only what's needed for production
|
||||||
|
COPY --from=builder --chown=bun:bun /app/node_modules ./node_modules
|
||||||
|
COPY --from=builder --chown=bun:bun /app/web/src ./web/src
|
||||||
|
COPY --from=builder --chown=bun:bun /app/bot ./bot
|
||||||
|
COPY --from=builder --chown=bun:bun /app/shared ./shared
|
||||||
|
COPY --from=builder --chown=bun:bun /app/package.json .
|
||||||
|
COPY --from=builder --chown=bun:bun /app/drizzle.config.ts .
|
||||||
|
COPY --from=builder --chown=bun:bun /app/tsconfig.json .
|
||||||
|
|
||||||
|
# Switch to non-root user
|
||||||
|
USER bun
|
||||||
|
|
||||||
|
# Expose web dashboard port
|
||||||
|
EXPOSE 3000
|
||||||
|
|
||||||
|
# Health check
|
||||||
|
HEALTHCHECK --interval=30s --timeout=10s --start-period=40s --retries=3 \
|
||||||
|
CMD bun -e "fetch('http://localhost:3000/api/health').then(r => r.ok ? process.exit(0) : process.exit(1)).catch(() => process.exit(1))"
|
||||||
|
|
||||||
|
# Run in production mode
|
||||||
|
CMD ["bun", "run", "bot/index.ts"]
|
||||||
|
|||||||
@@ -1,48 +0,0 @@
|
|||||||
# =============================================================================
|
|
||||||
# Stage 1: Dependencies & Build
|
|
||||||
# =============================================================================
|
|
||||||
FROM oven/bun:latest AS builder
|
|
||||||
WORKDIR /app
|
|
||||||
|
|
||||||
# Install system dependencies needed for build
|
|
||||||
RUN apt-get update && apt-get install -y git && rm -rf /var/lib/apt/lists/*
|
|
||||||
|
|
||||||
# Install root project dependencies
|
|
||||||
COPY package.json bun.lock ./
|
|
||||||
RUN bun install --frozen-lockfile
|
|
||||||
|
|
||||||
# Copy source code
|
|
||||||
COPY . .
|
|
||||||
|
|
||||||
# =============================================================================
|
|
||||||
# Stage 2: Production Runtime
|
|
||||||
# =============================================================================
|
|
||||||
FROM oven/bun:latest AS production
|
|
||||||
WORKDIR /app
|
|
||||||
|
|
||||||
# Create non-root user for security (bun user already exists with 1000:1000)
|
|
||||||
# No need to create user/group
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
# Copy only what's needed for production
|
|
||||||
COPY --from=builder --chown=bun:bun /app/node_modules ./node_modules
|
|
||||||
COPY --from=builder --chown=bun:bun /app/web/src ./web/src
|
|
||||||
COPY --from=builder --chown=bun:bun /app/bot ./bot
|
|
||||||
COPY --from=builder --chown=bun:bun /app/shared ./shared
|
|
||||||
COPY --from=builder --chown=bun:bun /app/package.json .
|
|
||||||
COPY --from=builder --chown=bun:bun /app/drizzle.config.ts .
|
|
||||||
COPY --from=builder --chown=bun:bun /app/tsconfig.json .
|
|
||||||
|
|
||||||
# Switch to non-root user
|
|
||||||
USER bun
|
|
||||||
|
|
||||||
# Expose web dashboard port
|
|
||||||
EXPOSE 3000
|
|
||||||
|
|
||||||
# Health check
|
|
||||||
HEALTHCHECK --interval=30s --timeout=10s --start-period=40s --retries=3 \
|
|
||||||
CMD bun -e "fetch('http://localhost:3000/api/health').then(r => r.ok ? process.exit(0) : process.exit(1)).catch(() => process.exit(1))"
|
|
||||||
|
|
||||||
# Run in production mode
|
|
||||||
CMD ["bun", "run", "bot/index.ts"]
|
|
||||||
@@ -34,7 +34,7 @@ services:
|
|||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
build:
|
build:
|
||||||
context: .
|
context: .
|
||||||
dockerfile: Dockerfile.prod
|
dockerfile: Dockerfile
|
||||||
target: production
|
target: production
|
||||||
image: aurora-app:latest
|
image: aurora-app:latest
|
||||||
ports:
|
ports:
|
||||||
|
|||||||
Reference in New Issue
Block a user