93da628362
- Optimized Backoffice Dockerfile: node:22-alpine -> gcr.io/distroless/nodejs22-debian12 - Optimized BFF Dockerfile: python:3.12-slim -> gcr.io/distroless/python3-debian12 - Updated Backoffice Auth to use JWT_SECRET for local verification - Updated .env.example with correct env vars
40 lines
1.1 KiB
Docker
40 lines
1.1 KiB
Docker
# syntax=docker/dockerfile:1
|
|
|
|
# ===== STAGE 1: Base =====
|
|
FROM node:22-alpine AS base
|
|
RUN corepack enable && corepack prepare pnpm@latest --activate
|
|
WORKDIR /app
|
|
|
|
# ===== STAGE 2: Dependencies =====
|
|
FROM base AS deps
|
|
COPY package.json pnpm-lock.yaml ./
|
|
|
|
# Cache do pnpm store para builds mais rápidas
|
|
RUN --mount=type=cache,id=pnpm,target=/pnpm/store \
|
|
pnpm install --frozen-lockfile
|
|
|
|
# ===== STAGE 3: Build =====
|
|
FROM deps AS build
|
|
COPY . .
|
|
RUN pnpm prisma:generate && pnpm build
|
|
|
|
# ===== STAGE 4: Production =====
|
|
|
|
# ===== STAGE 4: Production (Distroless) =====
|
|
FROM gcr.io/distroless/nodejs22-debian12:nonroot
|
|
|
|
WORKDIR /app
|
|
|
|
# Copia apenas o necessário para produção
|
|
COPY --from=build --chown=nonroot:nonroot /app/dist ./dist
|
|
COPY --from=build --chown=nonroot:nonroot /app/prisma ./prisma
|
|
COPY --from=build --chown=nonroot:nonroot /app/node_modules/.prisma ./node_modules/.prisma
|
|
COPY --from=build --chown=nonroot:nonroot /app/node_modules/@prisma ./node_modules/@prisma
|
|
COPY --from=deps --chown=nonroot:nonroot /app/node_modules ./node_modules
|
|
COPY --chown=nonroot:nonroot package.json ./
|
|
|
|
ENV NODE_ENV=production
|
|
|
|
EXPOSE 3000
|
|
|
|
CMD ["dist/main.js"]
|