64 lines
1.5 KiB
Docker
64 lines
1.5 KiB
Docker
# Multi-stage build for FitPub application
|
|
|
|
# Stage 1: Build the application
|
|
FROM maven:3.9-eclipse-temurin-17 AS builder
|
|
|
|
WORKDIR /build
|
|
|
|
# Copy POM file first for better layer caching
|
|
COPY pom.xml .
|
|
|
|
# Download dependencies (cached if pom.xml hasn't changed)
|
|
RUN mvn dependency:go-offline -B
|
|
|
|
# Copy source code
|
|
COPY src ./src
|
|
|
|
# Build the application
|
|
RUN mvn clean package -DskipTests -B
|
|
|
|
# Stage 2: Create the runtime image
|
|
FROM eclipse-temurin:17-jre-jammy
|
|
|
|
WORKDIR /app
|
|
|
|
# Install curl for healthcheck and emoji fonts for activity image generation
|
|
RUN apt-get update && \
|
|
apt-get install -y --no-install-recommends \
|
|
curl \
|
|
fonts-noto-color-emoji && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
# Create non-root user for security
|
|
RUN groupadd -r fitpub && useradd -r -g fitpub fitpub
|
|
|
|
# Create directories for uploads and logs
|
|
RUN mkdir -p /app/uploads /app/logs && \
|
|
chown -R fitpub:fitpub /app
|
|
|
|
# Copy the built artifact from builder stage
|
|
COPY --from=builder /build/target/*.jar /app/fitpub.jar
|
|
|
|
# Change ownership
|
|
RUN chown fitpub:fitpub /app/fitpub.jar
|
|
|
|
# Switch to non-root user
|
|
USER fitpub
|
|
|
|
# Expose application port
|
|
EXPOSE 8080
|
|
|
|
# Environment variables
|
|
ENV REGISTRATION_ENABLED=true
|
|
|
|
# Health check
|
|
HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=3 \
|
|
CMD curl -f http://localhost:8080/actuator/health || exit 1
|
|
|
|
# Run the application
|
|
ENTRYPOINT ["java", \
|
|
"-XX:+UseContainerSupport", \
|
|
"-XX:MaxRAMPercentage=75.0", \
|
|
"-Djava.security.egd=file:/dev/./urandom", \
|
|
"-jar", \
|
|
"/app/fitpub.jar"]
|