diff --git a/.dockerignore b/.dockerignore new file mode 100644 index 0000000..809e0a4 --- /dev/null +++ b/.dockerignore @@ -0,0 +1,16 @@ +node_modules +npm-debug.log +.git +.gitignore +.cache +*.md +*.example +LICENSE +logo.* +*.yaml +*.png +*.gif +*.jpg +*.bmpr +*.sample +.env* \ No newline at end of file diff --git a/Dockerfile b/Dockerfile new file mode 100644 index 0000000..bbdc838 --- /dev/null +++ b/Dockerfile @@ -0,0 +1,45 @@ +# Base +FROM node:12-slim as base +ENV NODE=ENV=production +ENV TINI_VERSION v0.18.0 +ADD https://github.com/krallin/tini/releases/download/${TINI_VERSION}/tini /tini +RUN chmod +x /tini +EXPOSE 3000 +RUN mkdir /app && chown -R node:node /app +WORKDIR /app +USER node +COPY --chown=node:node package*.json ./ +RUN npm install --no-optional --silent && npm cache clean --force > "/dev/null" 2>&1 + +# Development ENV +FROM base as dev +ENV NODE_ENV=development +ENV PATH=/app/node_modules/.bin:$PATH +RUN npm install --only=development --no-optional --silent && npm cache clean --force > "/dev/null" 2>&1 +CMD ["nodemon", "server.js", "--inspect=0.0.0.0:9229"] + +# Source +FROM base as source +COPY --chown=node:node . . + +# Test ENV +FROM source as test +ENV NODE_ENV=development +ENV PATH=/app/node_modules/.bin:$PATH +COPY --from=dev /app/node_modules /app/node_modules +RUN eslint . +RUN npm test + +# Audit ENV +FROM test as audit +USER root +RUN npm audit --audit-level critical +ARG MICROSCANNER_TOKEN +ADD https://get.aquasec.com/microscanner / +RUN chmod +x /microscanner +RUN /microscanner $MICROSCANNER_TOKEN --continue-on-failure + +# Production ENV +FROM source as prod +ENTRYPOINT ["/tini", "--"] +CMD ["node", "server.js"] \ No newline at end of file