tk-generator/apps/api/Dockerfile at main · osstep/tk-generator · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
# syntax=docker/dockerfile:1.7

# ---------- base ----------
FROM node:20-bookworm-slim AS base
ENV PNPM_HOME=/pnpm
ENV PATH="$PNPM_HOME:$PATH"
RUN corepack enable && corepack prepare pnpm@9.15.9 --activate
# sharp нуждается в системных либах; в bookworm-slim они тянутся как зависимости npm-пакета,
# но добавим openssl для prisma и curl для healthcheck
RUN apt-get update \
 && apt-get install -y --no-install-recommends openssl ca-certificates curl tini \
 && rm -rf /var/lib/apt/lists/*
WORKDIR /app

# ---------- deps ----------
FROM base AS deps
COPY pnpm-workspace.yaml pnpm-lock.yaml package.json ./
COPY apps/api/package.json apps/api/package.json
COPY apps/web/package.json apps/web/package.json
COPY packages/shared/package.json packages/shared/package.json
RUN --mount=type=cache,id=pnpm,target=/pnpm/store \
    pnpm install --frozen-lockfile

# ---------- build (prisma generate) ----------
FROM deps AS build
COPY tsconfig.base.json ./
COPY packages/shared packages/shared
COPY apps/api apps/api
RUN pnpm --filter @tk/api exec prisma generate

# ---------- runtime ----------
FROM base AS runtime
ENV NODE_ENV=production
ENV PORT=3000
WORKDIR /app

# приносим установленные зависимости и исходники (API запускается через tsx,
# чтобы не строить @tk/shared отдельно — он импортируется из src напрямую)
COPY --from=build /app/node_modules ./node_modules
COPY --from=build /app/pnpm-workspace.yaml ./pnpm-workspace.yaml
COPY --from=build /app/package.json ./package.json
COPY --from=build /app/tsconfig.base.json ./tsconfig.base.json
COPY --from=build /app/packages/shared ./packages/shared
COPY --from=build /app/apps/api ./apps/api

# непривилегированный пользователь
RUN useradd -m -u 10001 app && chown -R app:app /app
USER app

EXPOSE 3000
HEALTHCHECK --interval=15s --timeout=5s --start-period=20s --retries=5 \
  CMD curl -fsS http://127.0.0.1:3000/api/health || exit 1

# tini как PID 1, при старте — миграции, затем сервер
ENTRYPOINT ["/usr/bin/tini", "--"]
WORKDIR /app/apps/api
ENV PATH="/app/apps/api/node_modules/.bin:/app/node_modules/.bin:${PATH}"
CMD ["sh", "-c", "prisma migrate deploy && exec tsx src/server.ts"]