Dockerfile

FROM node:24.11.1-alpine3.23 AS base

# ============================================
# Stage 1: Builder
# ============================================
FROM base AS builder

# Install pnpm globally
RUN npm install -g pnpm

WORKDIR /opt/app

# Copy only package files for better layer caching
COPY package.json pnpm-lock.yaml ./

# Install all dependencies (for build)
RUN pnpm install --frozen-lockfile

# Copy source code
COPY . .

# Build the application
RUN pnpm build

# ============================================
# Stage 2: Production
# ============================================
FROM base AS production

# Install system dependencies
RUN apk add --no-cache \
    ffmpeg \
    dumb-init \
    && rm -rf /var/cache/apk/*

# Create non-root user for security
RUN addgroup -g 1001 -S nodejs && \
    adduser -S nodejs -u 1001

WORKDIR /opt/app

# Copy built application and production dependencies
COPY --from=builder --chown=nodejs:nodejs /opt/app/dist ./dist
COPY --from=builder --chown=nodejs:nodejs /opt/app/node_modules ./node_modules
COPY --from=builder --chown=nodejs:nodejs /opt/app/package.json ./package.json

# Switch to non-root user
USER nodejs

# Set environment variables
ENV NODE_ENV=production \
    PORT=3033

# Expose port
EXPOSE 3033

# Health check
HEALTHCHECK --interval=30s --timeout=3s --start-period=40s --retries=3 \
    CMD node -e "require('http').get('http://localhost:3033/health', (r) => {process.exit(r.statusCode === 200 ? 0 : 1)})"

# Use dumb-init to handle signals properly
ENTRYPOINT ["dumb-init", "--"]

# Start the application
CMD ["node", "dist/server/index.js"]