117 lines
3.0 KiB
Docker
117 lines
3.0 KiB
Docker
# syntax=docker/dockerfile:1.7
|
|
|
|
ARG NODE_IMAGE=node:24.18.0-bookworm-slim
|
|
|
|
# ============================================================
|
|
# 1. Instalación de dependencias
|
|
# ============================================================
|
|
FROM ${NODE_IMAGE} AS deps
|
|
|
|
WORKDIR /app
|
|
|
|
ENV NEXT_TELEMETRY_DISABLED=1 \
|
|
NPM_CONFIG_AUDIT=false \
|
|
NPM_CONFIG_FUND=false \
|
|
NPM_CONFIG_FETCH_RETRIES=3 \
|
|
NPM_CONFIG_FETCH_RETRY_MINTIMEOUT=10000 \
|
|
NPM_CONFIG_FETCH_RETRY_MAXTIMEOUT=60000 \
|
|
NPM_CONFIG_FETCH_TIMEOUT=120000 \
|
|
NPM_CONFIG_MAXSOCKETS=6 \
|
|
NPM_CONFIG_LOGLEVEL=info
|
|
|
|
COPY package.json package-lock.json ./
|
|
|
|
# Muestra las versiones y valida acceso al registro antes de instalar.
|
|
RUN node --version \
|
|
&& npm --version \
|
|
&& npm config set registry https://registry.npmjs.org/ \
|
|
&& npm config get registry \
|
|
&& npm ping
|
|
|
|
# sharing=private evita quedar esperando el caché de otro build.
|
|
# timeout impide que npm quede bloqueado indefinidamente.
|
|
RUN --mount=type=cache,target=/root/.npm,sharing=private \
|
|
timeout 600s npm ci \
|
|
--no-audit \
|
|
--no-fund \
|
|
--prefer-offline \
|
|
--loglevel=info \
|
|
--timing
|
|
|
|
|
|
# ============================================================
|
|
# 2. Compilación de Next.js
|
|
# ============================================================
|
|
FROM ${NODE_IMAGE} AS builder
|
|
|
|
WORKDIR /app
|
|
|
|
ENV NODE_ENV=production \
|
|
NEXT_TELEMETRY_DISABLED=1 \
|
|
NODE_OPTIONS=--max-old-space-size=2048
|
|
|
|
COPY --from=deps /app/node_modules ./node_modules
|
|
COPY . .
|
|
|
|
# Conserva el caché de compilación de Next.js entre builds.
|
|
RUN --mount=type=cache,target=/app/.next/cache,sharing=private \
|
|
npm run build
|
|
|
|
# Verifica que next.config.ts tenga output: "standalone".
|
|
RUN test -f /app/.next/standalone/server.js
|
|
|
|
|
|
# ============================================================
|
|
# 3. Imagen final de producción
|
|
# ============================================================
|
|
FROM ${NODE_IMAGE} AS runner
|
|
|
|
WORKDIR /app
|
|
|
|
ENV NODE_ENV=production \
|
|
NEXT_TELEMETRY_DISABLED=1 \
|
|
HOSTNAME=0.0.0.0 \
|
|
PORT=80
|
|
|
|
# libcap permite que el usuario no-root escuche en el puerto 80.
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends \
|
|
ca-certificates \
|
|
libcap2-bin \
|
|
&& rm -rf /var/lib/apt/lists/* \
|
|
&& groupadd --gid 1001 nodejs \
|
|
&& useradd \
|
|
--uid 1001 \
|
|
--gid 1001 \
|
|
--create-home \
|
|
--shell /usr/sbin/nologin \
|
|
nextjs \
|
|
&& setcap 'cap_net_bind_service=+ep' /usr/local/bin/node
|
|
|
|
COPY --from=builder \
|
|
--chown=nextjs:nodejs \
|
|
/app/public \
|
|
./public
|
|
|
|
COPY --from=builder \
|
|
--chown=nextjs:nodejs \
|
|
/app/.next/standalone \
|
|
./
|
|
|
|
COPY --from=builder \
|
|
--chown=nextjs:nodejs \
|
|
/app/.next/static \
|
|
./.next/static
|
|
|
|
USER nextjs
|
|
|
|
EXPOSE 80
|
|
|
|
HEALTHCHECK \
|
|
--interval=30s \
|
|
--timeout=8s \
|
|
--start-period=30s \
|
|
--retries=3 \
|
|
CMD ["node", "-e", "fetch('http://127.0.0.1/api/health').then(r => process.exit(r.ok ? 0 : 1)).catch(() => process.exit(1))"]
|
|
|
|
CMD ["node", "server.js"] |