52fc861bcf
* feat: optimize dockerfile
use new dockerfile syntaxes
leverage multi-stage builds
strip yarn cache from image
use stricter yarn install command
run as a non-root user
* fix: mark yarn-deduplicate as a required dep
`yarn --production` will fail on a clean install otherwise
* fix: add sequelize required files for migrations
* fix: use correct ARG syntax for multistage builds
* revert: mark yarn-deduplicate as a required dep
no longer required as of 0b3adad751
50 lines
1.0 KiB
Docker
50 lines
1.0 KiB
Docker
# syntax=docker/dockerfile:1.2
|
|
ARG APP_PATH=/opt/outline
|
|
FROM node:14-alpine AS deps-common
|
|
|
|
ARG APP_PATH
|
|
WORKDIR $APP_PATH
|
|
COPY ./package.json ./yarn.lock ./
|
|
|
|
# ---
|
|
FROM deps-common AS deps-dev
|
|
RUN yarn install --no-optional --frozen-lockfile && \
|
|
yarn cache clean
|
|
|
|
# ---
|
|
FROM deps-common AS deps-prod
|
|
RUN yarn install --production=true --frozen-lockfile && \
|
|
yarn cache clean
|
|
|
|
# ---
|
|
FROM node:14-alpine AS builder
|
|
|
|
ARG APP_PATH
|
|
WORKDIR $APP_PATH
|
|
|
|
COPY . .
|
|
COPY --from=deps-dev $APP_PATH/node_modules ./node_modules
|
|
RUN yarn build
|
|
|
|
# ---
|
|
FROM node:14-alpine AS runner
|
|
|
|
ARG APP_PATH
|
|
WORKDIR $APP_PATH
|
|
ENV NODE_ENV production
|
|
|
|
COPY --from=builder $APP_PATH/build ./build
|
|
COPY --from=builder $APP_PATH/server ./server
|
|
COPY --from=builder $APP_PATH/.sequelizerc ./.sequelizerc
|
|
COPY --from=deps-prod $APP_PATH/node_modules ./node_modules
|
|
COPY --from=builder $APP_PATH/package.json ./package.json
|
|
|
|
RUN addgroup -g 1001 -S nodejs && \
|
|
adduser -S nodejs -u 1001 && \
|
|
chown -R nodejs:nodejs $APP_PATH/build
|
|
|
|
USER nodejs
|
|
|
|
EXPOSE 3000
|
|
CMD ["yarn", "start"]
|