71 lines
1.6 KiB
Docker
71 lines
1.6 KiB
Docker
# 生产环境多阶段构建 Dockerfile
|
|
# 第一阶段：构建应用
|
|
FROM node:18-alpine AS builder
|
|
|
|
# 设置工作目录
|
|
WORKDIR /app
|
|
|
|
# 复制package文件
|
|
COPY package*.json pnpm-lock.yaml ./
|
|
|
|
# 安装pnpm
|
|
RUN npm install -g pnpm
|
|
|
|
# 安装依赖
|
|
RUN pnpm install --frozen-lockfile
|
|
|
|
# 复制源代码
|
|
COPY . .
|
|
|
|
# 构建应用
|
|
RUN pnpm run build:h5
|
|
|
|
# 第二阶段：生产环境镜像
|
|
FROM nginx:1.25-alpine AS production
|
|
|
|
# 安装必要的工具
|
|
RUN apk add --no-cache \
|
|
curl \
|
|
tzdata \
|
|
&& cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime \
|
|
&& echo "Asia/Shanghai" > /etc/timezone \
|
|
&& apk del tzdata
|
|
|
|
# 创建nginx用户和组
|
|
RUN addgroup -g 1001 -S nginx-app && \
|
|
adduser -S -D -H -u 1001 -h /var/cache/nginx -s /sbin/nologin -G nginx-app -g nginx-app nginx-app
|
|
|
|
# 设置工作目录
|
|
WORKDIR /usr/share/nginx/html
|
|
|
|
# 删除nginx默认文件
|
|
RUN rm -rf /usr/share/nginx/html/*
|
|
|
|
# 从构建阶段复制构建产物
|
|
COPY --from=builder /app/dist/ /usr/share/nginx/html/
|
|
|
|
# 复制nginx配置
|
|
COPY nginx.prod.conf /etc/nginx/conf.d/default.conf
|
|
|
|
# 创建日志目录
|
|
RUN mkdir -p /var/log/nginx && \
|
|
chown -R nginx-app:nginx-app /var/log/nginx && \
|
|
chown -R nginx-app:nginx-app /usr/share/nginx/html && \
|
|
chown -R nginx-app:nginx-app /var/cache/nginx
|
|
|
|
# 设置正确的权限
|
|
RUN chmod -R 755 /usr/share/nginx/html
|
|
|
|
# 健康检查
|
|
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
|
|
CMD curl -f http://localhost:80/ || exit 1
|
|
|
|
# 暴露端口
|
|
EXPOSE 80
|
|
|
|
# 使用非root用户运行
|
|
USER nginx-app
|
|
|
|
# 启动nginx
|
|
CMD ["nginx", "-g", "daemon off;"]
|