27 lines
1.0 KiB
Docker
27 lines
1.0 KiB
Docker
FROM node:22-slim AS builder
|
|
WORKDIR /app
|
|
RUN apt-get update && apt-get install -y --no-install-recommends python3 make g++ \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
COPY package.json package-lock.json ./
|
|
RUN npm ci --no-audit --no-fund
|
|
COPY . .
|
|
RUN npm run build
|
|
|
|
FROM node:22-slim AS runner
|
|
WORKDIR /app
|
|
ENV NODE_ENV=production \
|
|
DATA_DIR=/app/data \
|
|
BACKUPS_DIR=/app/backups
|
|
RUN mkdir -p /app/data /app/backups && chown -R node:node /app
|
|
COPY --from=builder --chown=node:node /app/.next/standalone ./
|
|
COPY --from=builder --chown=node:node /app/.next/static ./.next/static
|
|
COPY --chown=node:node entrypoint.sh /app/entrypoint.sh
|
|
RUN chmod +x /app/entrypoint.sh
|
|
# Non-root: der Container startet direkt als node (UID:GID 1000:1000), kein root beim Start.
|
|
USER node
|
|
EXPOSE 3000
|
|
HEALTHCHECK --interval=30s --timeout=5s --start-period=10s \
|
|
CMD node -e "fetch('http://127.0.0.1:3000/api/health').then((r) => { if (!r.ok) process.exit(1); }).catch(() => process.exit(1))"
|
|
ENTRYPOINT ["/app/entrypoint.sh"]
|
|
CMD ["node", "server.js"]
|