| # Stage 1: Build TypeScript | |
| FROM node:18-alpine AS builder | |
| WORKDIR /app | |
| # Copy package files | |
| COPY package*.json ./ | |
| COPY tsconfig.json ./ | |
| # Install ALL dependencies (including dev dependencies for build) | |
| RUN npm ci | |
| # Copy source code | |
| COPY . . | |
| # Build TypeScript to JavaScript | |
| RUN npm run build | |
| # ============================================================================ | |
| # Stage 2: Production Runtime | |
| FROM node:18-alpine | |
| WORKDIR /app | |
| # Copy package files | |
| COPY package*.json ./ | |
| # Install ONLY production dependencies | |
| RUN npm ci --only=production && npm cache clean --force | |
| # Copy built files from builder stage | |
| COPY --from=builder /app/dist ./dist | |
| COPY .env .env | |
| # Copy any additional files needed at runtime | |
| # COPY --from=builder /app/public ./public 2>/dev/null || true | |
| # Create non-root user for security | |
| RUN addgroup -g 1001 -S nodejs && \ | |
| adduser -S nodejs -u 1001 && \ | |
| chown -R nodejs:nodejs /app | |
| USER nodejs | |
| # Expose port | |
| EXPOSE 3000 | |
| # Health check | |
| HEALTHCHECK --interval=30s --timeout=5s --start-period=40s --retries=3 \ | |
| CMD node -e "require('http').get('http://localhost:3000/api/v1/health', (r) => { process.exit(r.statusCode === 200 ? 0 : 1) })" || exit 1 | |
| # Start application | |
| CMD ["node", "dist/server.js"] |