35 lines
786 B
Docker
35 lines
786 B
Docker
# Use an official Node runtime as the parent image
|
|
FROM node:18-slim
|
|
|
|
# Create app directory
|
|
WORKDIR /usr/src/app
|
|
|
|
# Install app dependencies
|
|
# A wildcard is used to ensure both package.json AND package-lock.json are copied
|
|
COPY package*.json ./
|
|
|
|
# Install dependencies
|
|
RUN npm ci --only=production
|
|
|
|
# Bundle app source
|
|
COPY . .
|
|
|
|
# Create a non-root user with system UID
|
|
RUN addgroup --system --gid 999 nodejs && \
|
|
adduser --system --uid 999 --ingroup nodejs --no-create-home nodejs && \
|
|
chown -R nodejs:nodejs /usr/src/app
|
|
|
|
USER nodejs
|
|
|
|
# Your app binds to port 3000
|
|
EXPOSE 3000
|
|
|
|
# Add simple healthcheck
|
|
HEALTHCHECK --interval=30s --timeout=3s \
|
|
CMD node -e "process.exit(0)"
|
|
|
|
# Define environment variable
|
|
ENV NODE_ENV=production
|
|
|
|
# Start the app
|
|
CMD [ "node", "index.js" ] |