# ================================ # Build Stage # ================================ FROM node:20-alpine AS builder WORKDIR /app # Install dependencies for native modules RUN apk add --no-cache python3 make g++ # Copy package files COPY package*.json ./ # Install ALL dependencies (including devDependencies for build) RUN npm ci && npm cache clean --force # Copy source code COPY . . # Build the application RUN npm run build # Remove devDependencies after build RUN npm prune --production # ================================ # Production Stage # ================================ FROM node:20-alpine AS production WORKDIR /app # Add labels LABEL maintainer="Government of Goa" LABEL description="Goa GEL Backend - Blockchain Document Verification Platform" LABEL version="1.0.0" # Install runtime dependencies RUN apk add --no-cache \ postgresql-client \ bash \ wget # Create non-root user for security RUN addgroup -g 1001 -S nodejs && \ adduser -S nestjs -u 1001 # Copy built application from builder COPY --from=builder --chown=nestjs:nodejs /app/dist ./dist COPY --from=builder --chown=nestjs:nodejs /app/node_modules ./node_modules COPY --from=builder --chown=nestjs:nodejs /app/package*.json ./ # Copy compiled database migrations and seeds from dist COPY --from=builder --chown=nestjs:nodejs /app/dist/database/migrations ./src/database/migrations COPY --from=builder --chown=nestjs:nodejs /app/dist/database/seeds ./src/database/seeds COPY --from=builder --chown=nestjs:nodejs /app/dist/database/knexfile.js ./src/database/knexfile.js # Copy initialization scripts COPY --chown=nestjs:nodejs scripts ./scripts RUN chmod +x scripts/*.sh # Set environment variables ENV NODE_ENV=production ENV PORT=3001 # Expose port EXPOSE 3001 # Health check HEALTHCHECK --interval=30s --timeout=10s --start-period=40s --retries=3 \ CMD wget --no-verbose --tries=1 --spider http://localhost:3001/api/v1/health || exit 1 # Use entrypoint script for initialization ENTRYPOINT ["/app/scripts/docker-entrypoint.sh"]