martijn.diersmann@pm.me
24 lines
743 B
Docker
24 lines
743 B
Docker
# Turbo Race - productie-image
|
|
FROM node:20-alpine
|
|
|
|
ENV NODE_ENV=production
|
|
WORKDIR /app
|
|
|
|
# eerst alleen package-files voor betere layer-caching
|
|
COPY package.json package-lock.json ./
|
|
RUN npm ci --omit=dev && \
|
|
# OS-patches ophalen (o.a. OpenSSL) en de npm-CLI + corepack verwijderen:
|
|
# die zijn niet nodig in runtime ("node server/index.js") en zouden anders
|
|
# via de gebundelde tooling (tar/pacote/glob/...) CVE's in de image brengen.
|
|
apk upgrade --no-cache && \
|
|
rm -rf /usr/local/lib/node_modules/npm /usr/local/lib/node_modules/corepack /usr/local/bin/npm /usr/local/bin/npx /usr/local/bin/corepack /tmp/*
|
|
|
|
COPY server ./server
|
|
COPY public ./public
|
|
|
|
ENV PORT=8080
|
|
EXPOSE 8080
|
|
|
|
USER node
|
|
CMD ["node", "server/index.js"]
|