# Base image for all stages FROM node:20-alpine AS base # Install pnpm globally RUN corepack enable && corepack prepare pnpm@10.19.0 --activate # Set working directory WORKDIR /app # Copy monorepo configuration files COPY pnpm-workspace.yaml package.json pnpm-lock.yaml ./ COPY turbo.json ./ # ====================== # Dependencies stage # ====================== FROM base AS deps # Copy all package.json files for workspace resolution COPY packages/shared/package.json ./packages/shared/ COPY packages/ui/package.json ./packages/ui/ COPY packages/config/package.json ./packages/config/ COPY apps/api/package.json ./apps/api/ # Install dependencies RUN pnpm install --frozen-lockfile # ====================== # Builder stage # ====================== FROM base AS builder # Copy dependencies COPY --from=deps /app/node_modules ./node_modules COPY --from=deps /app/packages ./packages COPY --from=deps /app/apps/api/node_modules ./apps/api/node_modules # Copy all source code COPY packages ./packages COPY apps/api ./apps/api # Set working directory to API app WORKDIR /app/apps/api # Generate Prisma client RUN pnpm prisma:generate # Build the application RUN pnpm build # ====================== # Production stage # ====================== FROM node:20-alpine AS production # Install pnpm RUN corepack enable && corepack prepare pnpm@10.19.0 --activate # Install dumb-init for proper signal handling RUN apk add --no-cache dumb-init # Create non-root user RUN addgroup -g 1001 -S nodejs && adduser -S nestjs -u 1001 WORKDIR /app # Copy package files COPY --chown=nestjs:nodejs pnpm-workspace.yaml package.json pnpm-lock.yaml ./ COPY --chown=nestjs:nodejs turbo.json ./ # Copy package.json files for workspace resolution COPY --chown=nestjs:nodejs packages/shared/package.json ./packages/shared/ COPY --chown=nestjs:nodejs packages/ui/package.json ./packages/ui/ COPY --chown=nestjs:nodejs packages/config/package.json ./packages/config/ COPY --chown=nestjs:nodejs apps/api/package.json ./apps/api/ # Install production dependencies only RUN pnpm install --prod --frozen-lockfile # Copy built application and dependencies COPY --from=builder --chown=nestjs:nodejs /app/packages ./packages COPY --from=builder --chown=nestjs:nodejs /app/apps/api/dist ./apps/api/dist COPY --from=builder --chown=nestjs:nodejs /app/apps/api/prisma ./apps/api/prisma COPY --from=builder --chown=nestjs:nodejs /app/apps/api/node_modules/.prisma ./apps/api/node_modules/.prisma # Set working directory to API app WORKDIR /app/apps/api # Switch to non-root user USER nestjs # Expose API port EXPOSE 3001 # Health check HEALTHCHECK --interval=30s --timeout=10s --start-period=40s --retries=3 \ CMD node -e "require('http').get('http://localhost:3001/health', (r) => {process.exit(r.statusCode === 200 ? 0 : 1)})" # Use dumb-init to handle signals properly ENTRYPOINT ["dumb-init", "--"] # Start the application CMD ["node", "dist/main.js"]