# 多阶段构建 Dockerfile # 构建阶段 FROM node:20-alpine AS builder WORKDIR /app # 复制 package 文件 COPY package*.json ./ # 安装依赖 RUN npm install # 复制源代码 COPY . . # 构建应用 RUN npm run build # 生产阶段 FROM node:20-alpine WORKDIR /app # 创建非 root 用户 RUN addgroup -g 1001 -S nodejs && \ adduser -S nestjs -u 1001 # 从构建阶段复制文件 COPY --from=builder --chown=nestjs:nodejs /app/dist ./dist COPY --from=builder --chown=nestjs:nodejs /app/node_modules ./node_modules COPY --from=builder --chown=nestjs:nodejs /app/package*.json ./ # 切换用户 USER nestjs # 暴露端口 EXPOSE 3000 # 健康检查 HEALTHCHECK --interval=30s --timeout=3s --start-period=40s \ CMD node -e "require('http').get('http://localhost:3000/health', (r) => {process.exit(r.statusCode === 200 ? 0 : 1)})" # 启动命令 CMD ["node", "dist/main"]