000e6bf796
* fix: Dockerfile CMD path and chown for Docker proxy support * chore: remove legacy codeql.yml (ADR-011 GHAS migration) * chore: remove legacy gitleaks.yml (ADR-011 GHAS migration) * docs: add TOOLS.md with tool documentation
28 lines
1.0 KiB
Docker
28 lines
1.0 KiB
Docker
# Auto-generated Dockerfile for Law MCP HTTP transport.
|
|
# Built by rollout-http-transport.sh from Ansvar-Architecture-Documentation.
|
|
|
|
# ── Stage 1: Build ──────────────────────────────────────────────────────
|
|
FROM node:20-alpine AS builder
|
|
WORKDIR /app
|
|
COPY package*.json ./
|
|
RUN npm ci --ignore-scripts
|
|
COPY tsconfig.json ./
|
|
COPY src ./src
|
|
RUN npm run build
|
|
|
|
# ── Stage 2: Production ────────────────────────────────────────────────
|
|
FROM node:20-alpine AS production
|
|
WORKDIR /app
|
|
COPY package*.json ./
|
|
RUN npm ci --omit=dev --ignore-scripts
|
|
COPY --from=builder /app/dist ./dist
|
|
COPY data/database.db ./data/database.db
|
|
|
|
# Security: non-root user
|
|
RUN addgroup -S nodejs && adduser -S nodejs -G nodejs \
|
|
&& chown -R nodejs:nodejs /app/data
|
|
USER nodejs
|
|
|
|
ENV NODE_ENV=production
|
|
CMD ["node", "dist/http-server.js"]
|