# Multi-stage build for Gallus CMS Backend # Stage 1: Builder FROM node:20-alpine AS builder WORKDIR /app # Install build dependencies for native modules (better-sqlite3) RUN apk add --no-cache python3 make g++ # Install dependencies COPY package*.json ./ # Use npm ci when lockfile exists, fallback to npm install for local/dev RUN npm ci || npm install # Copy source COPY . . # Build TypeScript RUN npm run build # Stage 2: Production FROM node:20-alpine WORKDIR /app # Install runtime dependencies (git for simple-git, sqlite3 CLI tool) RUN apk add --no-cache git sqlite # Copy production dependencies from builder (already compiled native modules) COPY --from=builder /app/node_modules ./node_modules # Copy built files from builder COPY --from=builder /app/dist ./dist COPY --from=builder /app/src/db/migrations ./dist/db/migrations # Create directories RUN mkdir -p /app/workspace /app/data # Ensure proper permissions RUN chown -R node:node /app # Switch to non-root user USER node # Expose port EXPOSE 8080 # Set environment ENV NODE_ENV=production ENV PORT=8080 ENV DATABASE_PATH=/app/data/gallus_cms.db # Health check HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \ CMD node -e "require('http').get('http://localhost:8080/health', (r) => {process.exit(r.statusCode === 200 ? 0 : 1)})" # Run DB migrations if present, then start application CMD ["/bin/sh", "-lc", "[ -f dist/migrate.js ] && node dist/migrate.js || true; node dist/index.js"]