61 lines
No EOL
1.3 KiB
Docker
61 lines
No EOL
1.3 KiB
Docker
FROM node:22-alpine AS frontend-builder
|
|
|
|
WORKDIR /app
|
|
|
|
COPY frontend /app
|
|
|
|
RUN npm install
|
|
|
|
RUN npm run build
|
|
|
|
# Multi-stage build for GoCheck application
|
|
# Stage 1: Build the Go binary
|
|
FROM golang:1.24-alpine AS builder
|
|
|
|
# Install git, ca-certificates, and build tools for CGO
|
|
RUN apk add --no-cache git ca-certificates gcc musl-dev
|
|
|
|
# Set working directory
|
|
WORKDIR /app
|
|
|
|
# Copy go mod files
|
|
COPY go.mod go.sum ./
|
|
|
|
# Download dependencies
|
|
RUN go mod download
|
|
|
|
# Copy source code
|
|
COPY . .
|
|
|
|
COPY --from=frontend-builder /app/dist /app/frontend/dist
|
|
|
|
# Build the binary with embedded static files
|
|
RUN CGO_ENABLED=1 GOOS=linux go build -a -installsuffix cgo -o gocheck .
|
|
|
|
# Stage 2: Create minimal runtime container
|
|
FROM alpine:latest
|
|
|
|
# Install runtime dependencies for SQLite
|
|
RUN apk add --no-cache ca-certificates sqlite
|
|
|
|
# Create non-root user
|
|
RUN addgroup -g 1001 -S gocheck && \
|
|
adduser -S -D -H -h /app -s /sbin/nologin -G gocheck -g gocheck -u 1001 gocheck
|
|
|
|
# Copy the binary from builder stage
|
|
COPY --from=builder /app/gocheck /app/gocheck
|
|
|
|
# Set working directory
|
|
WORKDIR /app
|
|
|
|
# Change ownership to non-root user
|
|
RUN chown -R gocheck:gocheck /app
|
|
|
|
# Switch to non-root user
|
|
USER gocheck
|
|
|
|
# Expose default port (can be overridden via PORT env var)
|
|
EXPOSE 8080
|
|
|
|
# Run the binary
|
|
ENTRYPOINT ["/app/gocheck"] |