0d644ba41d
All checks were successful
dev - build & deploy naar test / build-and-deploy (push) Successful in 27s
36 lines
1.2 KiB
Docker
36 lines
1.2 KiB
Docker
# syntax=docker/dockerfile:1
|
|
|
|
# --- Dependencies (alleen productie) ----------------------------------------
|
|
FROM node:22-alpine AS deps
|
|
WORKDIR /app
|
|
COPY package.json package-lock.json* ./
|
|
# npm ci als er een lockfile is, anders install (eerste keer nog geen lock)
|
|
RUN if [ -f package-lock.json ]; then npm ci --omit=dev; else npm install --omit=dev; fi
|
|
|
|
# --- Runtime ----------------------------------------------------------------
|
|
FROM node:22-alpine AS runtime
|
|
ENV NODE_ENV=production
|
|
WORKDIR /app
|
|
|
|
# Draai als non-root gebruiker
|
|
RUN addgroup -S app && adduser -S app -G app && mkdir -p /app/storage/images && chown -R app:app /app/storage
|
|
|
|
COPY --chown=app:app --from=deps /app/node_modules ./node_modules
|
|
COPY --chown=app:app package.json ./
|
|
COPY --chown=app:app src ./src
|
|
COPY --chown=app:app public ./public
|
|
COPY --chown=app:app db ./db
|
|
|
|
# Versie + commit-hash worden tijdens de build meegegeven door CI
|
|
ARG APP_VERSION=dev
|
|
ENV APP_VERSION=$APP_VERSION
|
|
ARG GIT_SHA=
|
|
ENV GIT_SHA=$GIT_SHA
|
|
|
|
USER app
|
|
EXPOSE 3000
|
|
|
|
HEALTHCHECK --interval=30s --timeout=3s --start-period=10s --retries=3 \
|
|
CMD node -e "fetch('http://127.0.0.1:3000/healthz').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"
|
|
|
|
CMD ["node", "src/server.js"]
|