fix(dockerfile): do not expose project root to production

restorecommerce · Mar 12, 2024 · f23fe8f · f23fe8f
1 parent 0987cd0
commit f23fe8f
Showing 1 changed file with 3 additions and 13 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -6,13 +6,9 @@ USER node
 ARG APP_HOME=/home/node/srv
 WORKDIR $APP_HOME
 
-COPY package.json package.json
-COPY package-lock.json package-lock.json
-
-RUN npm ci
-
 COPY --chown=node:node . .
 
+RUN npm ci
 RUN npm run build
 
 
@@ -25,15 +21,9 @@ USER node
 ARG APP_HOME=/home/node/srv
 WORKDIR $APP_HOME
 
-COPY package.json package.json
-COPY package-lock.json package-lock.json
-
-COPY --chown=node:node . $APP_HOME
+COPY --chown=node:node ./cfg $APP_HOME/cfg
 COPY --chown=node:node --from=build $APP_HOME/lib $APP_HOME/lib
 
 EXPOSE 50051
 
-USER root
-USER node
-
-CMD [ "npm", "start" ]
+CMD [ "node", "./lib/start.cjs" ]