Aido-platform/apps/api/Dockerfile at develop · Aiddoo/Aido-platform · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
# Stage 1: base - Node + pnpm
FROM node:22-alpine AS base
RUN corepack enable && corepack prepare pnpm@10.29.3 --activate
WORKDIR /app


# Stage 2: deps - 의존성 설치
FROM base AS deps

COPY pnpm-lock.yaml pnpm-workspace.yaml package.json ./
COPY turbo.json ./

# Workspace package.json 복사 (tooling 포함)
COPY apps/api/package.json ./apps/api/
COPY packages/errors/package.json ./packages/errors/
COPY packages/utils/package.json ./packages/utils/
COPY packages/validators/package.json ./packages/validators/
COPY tooling/biome/package.json ./tooling/biome/
COPY tooling/jest/package.json ./tooling/jest/
COPY tooling/typescript/package.json ./tooling/typescript/
COPY tooling/vitest/package.json ./tooling/vitest/

RUN pnpm install --frozen-lockfile --ignore-scripts

# Stage 3: builder - 빌드
FROM base AS builder

COPY --from=deps /app ./

COPY . .

# Workspace 패키지 빌드 (순서 중요: errors → utils → validators)
RUN pnpm --filter @aido/errors build && \
    pnpm --filter @aido/utils build && \
    pnpm --filter @aido/validators build

# Prisma generate + API build
RUN cd apps/api && pnpm prisma generate
RUN pnpm --filter @aido/api build

# Production 의존성만 추출
RUN pnpm --filter @aido/api deploy --legacy --prod /app/production


# Stage 4: migrate - Prisma 마이그레이션 (경량화)
FROM node:22-alpine AS migrate
RUN corepack enable && corepack prepare pnpm@10.29.3 --activate
WORKDIR /app/apps/api

# Prisma 관련 파일만 복사
COPY apps/api/prisma ./prisma
COPY apps/api/prisma.config.ts ./

# 빈 프로젝트에 prisma CLI만 설치 (workspace/catalog 의존 회피)
RUN pnpm init && pnpm add prisma@latest

# RDS CA 인증서
ADD --chmod=644 https://truststore.pki.rds.amazonaws.com/global/global-bundle.pem /app/certs/rds-ca.pem
ENV NODE_EXTRA_CA_CERTS=/app/certs/rds-ca.pem

RUN pnpm prisma generate

CMD ["pnpm", "prisma", "migrate", "deploy"]


# Stage 5: development - 개발 핫리로드
FROM base AS development

COPY --from=deps /app ./
COPY . .

RUN pnpm --filter @aido/errors build && \
    pnpm --filter @aido/utils build && \
    pnpm --filter @aido/validators build

RUN cd apps/api && pnpm prisma generate

WORKDIR /app/apps/api

ENV NODE_ENV=development
EXPOSE 8080

CMD ["pnpm", "dev"]

# Stage 6: production - 최종 런타임
FROM node:22-alpine AS production

WORKDIR /app

RUN addgroup --system --gid 1001 nodejs && \
    adduser --system --uid 1001 nestjs

# Production deps + Prisma client
COPY --from=builder --chown=nestjs:nodejs /app/production ./
COPY --from=builder --chown=nestjs:nodejs /app/apps/api/dist ./dist
COPY --from=builder --chown=nestjs:nodejs /app/apps/api/src/generated ./src/generated
COPY --from=builder --chown=nestjs:nodejs /app/apps/api/prisma ./prisma

# RDS CA 인증서 다운로드 (COPY 이후에 배치 — nestjs 유저가 읽을 수 있도록 chown)
ADD --chmod=644 --chown=nestjs:nodejs https://truststore.pki.rds.amazonaws.com/global/global-bundle.pem /app/certs/rds-ca.pem

ENV NODE_ENV=production
ENV PORT=8080
ENV NODE_EXTRA_CA_CERTS=/app/certs/rds-ca.pem

EXPOSE 8080

USER nestjs

HEALTHCHECK --interval=30s --timeout=10s --start-period=15s --retries=3 \
    CMD wget --no-verbose --tries=1 --spider http://localhost:8080/health || exit 1

CMD ["node", "--max-old-space-size=384", "dist/main.js"]