08fd9e11e3
All checks were successful
dev - build & deploy naar test / build-and-deploy (push) Successful in 17s
34 lines
1.1 KiB
Docker
34 lines
1.1 KiB
Docker
# syntax=docker/dockerfile:1
|
|
|
|
# --- Dependencies (alleen productie) ----------------------------------------
|
|
FROM node:22-alpine AS deps
|
|
WORKDIR /app
|
|
COPY package.json package-lock.json* ./
|
|
# npm ci als er een lockfile is, anders install (eerste keer nog geen lock)
|
|
RUN if [ -f package-lock.json ]; then npm ci --omit=dev; else npm install --omit=dev; fi
|
|
|
|
# --- Runtime ----------------------------------------------------------------
|
|
FROM node:22-alpine AS runtime
|
|
ENV NODE_ENV=production
|
|
WORKDIR /app
|
|
|
|
# Draai als non-root gebruiker
|
|
RUN addgroup -S app && adduser -S app -G app
|
|
|
|
COPY --chown=app:app --from=deps /app/node_modules ./node_modules
|
|
COPY --chown=app:app package.json ./
|
|
COPY --chown=app:app src ./src
|
|
COPY --chown=app:app public ./public
|
|
COPY --chown=app:app db ./db
|
|
|
|
# Versie wordt tijdens de build meegegeven door CI
|
|
ARG APP_VERSION=dev
|
|
ENV APP_VERSION=$APP_VERSION
|
|
|
|
USER app
|
|
EXPOSE 3000
|
|
|
|
HEALTHCHECK --interval=30s --timeout=3s --start-period=10s --retries=3 \
|
|
CMD node -e "fetch('http://127.0.0.1:3000/healthz').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"
|
|
|
|
CMD ["node", "src/server.js"]
|