feat: 实现 AIO 容器部署

2026-07-26 16:55:36 +08:00
parent d1b5880a5b
commit 15dd2acfc0
13 changed files with 425 additions and 32 deletions
@@ -0,0 +1,77 @@
+# syntax=docker/dockerfile:1
+
+FROM node:22-bookworm-slim AS build
+
+WORKDIR /app
+ENV PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD=1
+
+COPY package.json package-lock.json ./
+COPY apps/server/package.json apps/server/package.json
+COPY apps/web/package.json apps/web/package.json
+COPY packages/core/package.json packages/core/package.json
+COPY packages/renderer/package.json packages/renderer/package.json
+RUN npm ci
+
+COPY tsconfig.base.json ./
+COPY apps ./apps
+COPY packages ./packages
+RUN npm run build
+
+FROM node:22-bookworm-slim AS production-dependencies
+
+WORKDIR /app
+ENV PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD=1
+
+COPY package.json package-lock.json ./
+COPY apps/server/package.json apps/server/package.json
+COPY apps/web/package.json apps/web/package.json
+COPY packages/core/package.json packages/core/package.json
+COPY packages/renderer/package.json packages/renderer/package.json
+RUN npm ci --omit=dev --workspace @md-to-pdf/server --include-workspace-root
+
+FROM node:22-bookworm-slim AS runtime
+
+USER root
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends \
+      nginx \
+      fonts-noto-cjk \
+      fonts-noto-color-emoji \
+    && rm -rf /var/lib/apt/lists/* \
+    && groupadd --system pwuser \
+    && useradd --system --create-home --gid pwuser --shell /bin/bash pwuser
+
+WORKDIR /app
+
+COPY --chown=pwuser:pwuser package.json package-lock.json ./
+COPY --chown=pwuser:pwuser apps/server/package.json apps/server/package.json
+COPY --chown=pwuser:pwuser apps/web/package.json apps/web/package.json
+COPY --chown=pwuser:pwuser packages/core/package.json packages/core/package.json
+COPY --chown=pwuser:pwuser packages/renderer/package.json packages/renderer/package.json
+COPY --chown=pwuser:pwuser --from=production-dependencies /app/node_modules ./node_modules
+ENV PLAYWRIGHT_BROWSERS_PATH=/ms-playwright
+RUN npx playwright install --with-deps chromium \
+    && chown -R pwuser:pwuser /ms-playwright
+
+COPY --chown=pwuser:pwuser --from=build /app/apps/server/dist ./apps/server/dist
+COPY --chown=pwuser:pwuser --from=build /app/apps/web/dist ./apps/web/dist
+COPY --chown=pwuser:pwuser --from=build /app/packages/core/dist ./packages/core/dist
+COPY --chown=pwuser:pwuser --from=build /app/packages/renderer/dist ./packages/renderer/dist
+COPY --chown=pwuser:pwuser themes ./themes
+COPY deploy/nginx.conf /etc/nginx/nginx.conf
+COPY --chown=pwuser:pwuser deploy/entrypoint.sh /app/deploy/entrypoint.sh
+
+RUN chmod 0755 /app/deploy/entrypoint.sh
+
+ENV HOST=127.0.0.1 \
+    PORT=3001 \
+    PDF_RENDER_ORIGIN=http://127.0.0.1:8080 \
+    PDF_CONCURRENCY=1 \
+    PDF_MAX_QUEUE=4 \
+    PDF_TIMEOUT_MS=120000
+
+USER pwuser
+
+EXPOSE 8080
+
+ENTRYPOINT ["/app/deploy/entrypoint.sh"]