b49574f39b
- Add entrypoint script that ensures /data is owned by node user before dropping privileges with su-exec - Remove USER node from Dockerfile (entrypoint handles it) - Change client depends_on to service_healthy so nginx waits for the server to pass its healthcheck before starting
34 lines
870 B
Docker
34 lines
870 B
Docker
# Node.js backend
|
|
FROM node:18-alpine
|
|
|
|
# Build tools needed for better-sqlite3 native compilation
|
|
# su-exec for dropping privileges in entrypoint
|
|
RUN apk add --no-cache python3 make g++ su-exec
|
|
|
|
WORKDIR /app
|
|
|
|
COPY package*.json ./
|
|
|
|
RUN npm install --omit=dev
|
|
|
|
# Remove build tools after install to keep image small
|
|
RUN apk del python3 make g++
|
|
|
|
COPY . .
|
|
|
|
# Create data directory for SQLite
|
|
RUN mkdir -p /data
|
|
VOLUME /data
|
|
|
|
# Entrypoint fixes /data permissions then drops to node user
|
|
COPY docker-entrypoint.sh /usr/local/bin/
|
|
RUN chmod +x /usr/local/bin/docker-entrypoint.sh
|
|
|
|
EXPOSE 3001
|
|
|
|
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
|
|
CMD node -e "require('http').get('http://localhost:3001/api/health',r=>{process.exit(r.statusCode===200?0:1)}).on('error',()=>process.exit(1))"
|
|
|
|
ENTRYPOINT ["docker-entrypoint.sh"]
|
|
CMD ["node", "server.js"]
|