优化:已知问题
This commit is contained in:
70
Dockerfile.prod
Normal file
70
Dockerfile.prod
Normal file
@@ -0,0 +1,70 @@
|
||||
# 生产环境多阶段构建 Dockerfile
|
||||
# 第一阶段:构建应用
|
||||
FROM node:18-alpine AS builder
|
||||
|
||||
# 设置工作目录
|
||||
WORKDIR /app
|
||||
|
||||
# 复制package文件
|
||||
COPY package*.json pnpm-lock.yaml ./
|
||||
|
||||
# 安装pnpm
|
||||
RUN npm install -g pnpm
|
||||
|
||||
# 安装依赖
|
||||
RUN pnpm install --frozen-lockfile
|
||||
|
||||
# 复制源代码
|
||||
COPY . .
|
||||
|
||||
# 构建应用
|
||||
RUN pnpm run build:h5
|
||||
|
||||
# 第二阶段:生产环境镜像
|
||||
FROM nginx:1.25-alpine AS production
|
||||
|
||||
# 安装必要的工具
|
||||
RUN apk add --no-cache \
|
||||
curl \
|
||||
tzdata \
|
||||
&& cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime \
|
||||
&& echo "Asia/Shanghai" > /etc/timezone \
|
||||
&& apk del tzdata
|
||||
|
||||
# 创建nginx用户和组
|
||||
RUN addgroup -g 1001 -S nginx-app && \
|
||||
adduser -S -D -H -u 1001 -h /var/cache/nginx -s /sbin/nologin -G nginx-app -g nginx-app nginx-app
|
||||
|
||||
# 设置工作目录
|
||||
WORKDIR /usr/share/nginx/html
|
||||
|
||||
# 删除nginx默认文件
|
||||
RUN rm -rf /usr/share/nginx/html/*
|
||||
|
||||
# 从构建阶段复制构建产物
|
||||
COPY --from=builder /app/dist/ /usr/share/nginx/html/
|
||||
|
||||
# 复制nginx配置
|
||||
COPY nginx.prod.conf /etc/nginx/conf.d/default.conf
|
||||
|
||||
# 创建日志目录
|
||||
RUN mkdir -p /var/log/nginx && \
|
||||
chown -R nginx-app:nginx-app /var/log/nginx && \
|
||||
chown -R nginx-app:nginx-app /usr/share/nginx/html && \
|
||||
chown -R nginx-app:nginx-app /var/cache/nginx
|
||||
|
||||
# 设置正确的权限
|
||||
RUN chmod -R 755 /usr/share/nginx/html
|
||||
|
||||
# 健康检查
|
||||
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
|
||||
CMD curl -f http://localhost:80/ || exit 1
|
||||
|
||||
# 暴露端口
|
||||
EXPOSE 80
|
||||
|
||||
# 使用非root用户运行
|
||||
USER nginx-app
|
||||
|
||||
# 启动nginx
|
||||
CMD ["nginx", "-g", "daemon off;"]
|
||||
Reference in New Issue
Block a user