diff --git a/Dockerfile b/Dockerfile index a16eb7f..e6fd9f7 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,37 +1,35 @@ # syntax=docker/dockerfile:1 -# Сборка фронта (все devDependencies + UI) +# Stage 1: Сборка фронтенда FROM node:22-alpine AS build WORKDIR /app COPY package.json package-lock.json ./ -RUN --mount=type=cache,target=/root/.npm \ - npm ci +RUN --mount=type=cache,target=/root/.npm npm ci COPY index.html vite.config.js ./ COPY public ./public COPY src ./src RUN npm run build -# Только runtime-deps: express, cors, sql.js (+ транзитивные) -FROM node:22-alpine AS prod +# Stage 2: Production dependencies + очистка node_modules +FROM node:22-alpine AS deps WORKDIR /app COPY package.json package-lock.json ./ -RUN --mount=type=cache,target=/root/.npm \ - npm ci --omit=dev -COPY server ./server -COPY --from=build /app/dist ./dist +RUN --mount=type=cache,target=/root/.npm npm ci --omit=dev && \ + find node_modules -type f \( \ + -name '*.md' -o -name '*.ts' -o -name '*.map' -o \ + -name 'LICENSE*' -o -name 'CHANGELOG*' -o -name 'README*' -o \ + -name '.npmignore' -o -name '.eslintrc*' -o -name '.travis.yml' -o \ + -name 'Makefile' -o -name '*.gyp' -o -name '*.gypi' \ + \) -delete && \ + find node_modules -type d -empty -delete -# Артефакты без package.json / lock — не нужны для node server/index.js -FROM node:22-alpine AS bundle -WORKDIR /out -COPY --from=prod /app/node_modules ./node_modules -COPY --from=prod /app/server ./server -COPY --from=prod /app/dist ./dist - -# Финал на Alpine: у базы меньше слоёв, чем у distroless Debian (history выглядит «легче»). -# Тяжёлый фронт в образ не попадает — только express/cors/sql.js (стадия prod). -FROM node:22-alpine +# Stage 3: Минимальный runtime (без npm/yarn/corepack) +FROM alpine:3.21 +RUN apk add --no-cache nodejs WORKDIR /app ENV NODE_ENV=production -COPY --from=bundle /out/ . +COPY --from=deps /app/node_modules ./node_modules +COPY --from=build /app/dist ./dist +COPY server ./server EXPOSE 3001 CMD ["node", "server/index.js"]