- ThrottlerGuard global: 20 req/min por IP en todos los endpoints - forbidNonWhitelisted: true en ValidationPipe - Dockerfile API: prisma migrate deploy antes de arrancar el proceso - coolify-compose: depends_on api (service_healthy) en web - GitHub Actions: build y push de imágenes api/web a GHCR en cada push a main Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
23 lines
997 B
Docker
23 lines
997 B
Docker
# Coolify / producción — API NestJS
|
|
FROM node:22-alpine AS base
|
|
RUN corepack enable && corepack prepare pnpm@9.15.0 --activate
|
|
WORKDIR /app
|
|
|
|
FROM base AS builder
|
|
COPY . .
|
|
RUN pnpm install --frozen-lockfile 2>/dev/null || pnpm install --no-frozen-lockfile --force
|
|
RUN pnpm --filter @moraworld/database exec prisma generate && pnpm --filter @moraworld/database build
|
|
RUN pnpm --filter @moraworld/api build
|
|
|
|
FROM node:22-alpine AS runner
|
|
WORKDIR /app
|
|
ENV NODE_ENV=production
|
|
RUN addgroup -S app && adduser -S app app
|
|
COPY --from=builder /app/apps/api/dist ./dist
|
|
COPY --from=builder /app/apps/api/package.json ./
|
|
COPY --from=builder /app/node_modules ./node_modules
|
|
COPY --from=builder /app/packages/database ./packages/database
|
|
USER app
|
|
EXPOSE 3001
|
|
# ponytail: migrate antes de arrancar; si quieres zero-downtime migrations, sepáralas como job previo en Coolify
|
|
CMD ["sh", "-c", "node node_modules/.bin/prisma migrate deploy --schema packages/database/prisma/schema.prisma && node dist/main.js"] |