# ---- сборка ---- FROM node:22-bookworm-slim AS build WORKDIR /app RUN apt-get update && apt-get install -y --no-install-recommends openssl ca-certificates && rm -rf /var/lib/apt/lists/* COPY package*.json ./ RUN npm ci COPY prisma ./prisma ENV DATABASE_URL="postgresql://build:build@localhost:5432/build" RUN npx prisma generate COPY tsconfig.json nest-cli.json ./ COPY src ./src COPY test ./test RUN npx tsc -p tsconfig.json # ---- рантайм ---- FROM node:22-bookworm-slim AS runtime WORKDIR /app ENV NODE_ENV=production ENV PORT=3000 RUN apt-get update && apt-get install -y --no-install-recommends openssl ca-certificates dumb-init && rm -rf /var/lib/apt/lists/* COPY package*.json ./ COPY --from=build /app/node_modules ./node_modules COPY --from=build /app/dist ./dist COPY --from=build /app/prisma ./prisma RUN chown -R node:node /app USER node EXPOSE 3000 # проба здоровья — без curl/wget, через встроенный fetch Node 22 HEALTHCHECK --interval=30s --timeout=5s --start-period=20s --retries=3 \ CMD node -e "fetch('http://127.0.0.1:'+(process.env.PORT||3000)+'/api/v1/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))" # dumb-init — корректная обработка сигналов (SIGTERM → graceful shutdown Nest) ENTRYPOINT ["dumb-init","--"] CMD ["node","dist/src/main.js"]