df1d85bfde
- T40 UI 审计计划和结果文档（docs/qa/） - wiki 更新：miniprogram 设计系统合规审计记录 + index 关键数字更新 - 审计 V2 完整报告（docs/audits/v2/） - 讨论记录文档（docs/discussions/） - 设计规格和实施计划（docs/superpowers/） - 角色测试计划和结果（docs/qa/role-test-*） - Docker 生产部署配置
113 lines
4.3 KiB
Docker
113 lines
4.3 KiB
Docker
# ==============================
|
|
# Stage 1: Build Rust backend
|
|
# ==============================
|
|
FROM rust:1.85-bookworm AS rust-builder
|
|
|
|
WORKDIR /app
|
|
|
|
# 先复制依赖文件以利用 Docker 缓存
|
|
COPY Cargo.toml Cargo.lock ./
|
|
COPY crates/erp-core/Cargo.toml crates/erp-core/Cargo.toml
|
|
COPY crates/erp-auth/Cargo.toml crates/erp-auth/Cargo.toml
|
|
COPY crates/erp-config/Cargo.toml crates/erp-config/Cargo.toml
|
|
COPY crates/erp-workflow/Cargo.toml crates/erp-workflow/Cargo.toml
|
|
COPY crates/erp-message/Cargo.toml crates/erp-message/Cargo.toml
|
|
COPY crates/erp-plugin/Cargo.toml crates/erp-plugin/Cargo.toml
|
|
COPY crates/erp-health/Cargo.toml crates/erp-health/Cargo.toml
|
|
COPY crates/erp-ai/Cargo.toml crates/erp-ai/Cargo.toml
|
|
COPY crates/erp-dialysis/Cargo.toml crates/erp-dialysis/Cargo.toml
|
|
COPY crates/erp-server/Cargo.toml crates/erp-server/Cargo.toml
|
|
COPY crates/erp-server/migration/Cargo.toml crates/erp-server/migration/Cargo.toml
|
|
COPY crates/erp-plugin-prototype/Cargo.toml crates/erp-plugin-prototype/Cargo.toml
|
|
COPY crates/erp-plugin-test-sample/Cargo.toml crates/erp-plugin-test-sample/Cargo.toml
|
|
COPY crates/erp-plugin-assessment/Cargo.toml crates/erp-plugin-assessment/Cargo.toml
|
|
COPY crates/erp-plugin-crm/Cargo.toml crates/erp-plugin-crm/Cargo.toml
|
|
COPY crates/erp-plugin-freelance/Cargo.toml crates/erp-plugin-freelance/Cargo.toml
|
|
COPY crates/erp-plugin-inventory/Cargo.toml crates/erp-plugin-inventory/Cargo.toml
|
|
COPY crates/erp-plugin-itops/Cargo.toml crates/erp-plugin-itops/Cargo.toml
|
|
|
|
# 创建空的 lib.rs/main.rs 占位以缓存依赖
|
|
RUN mkdir -p crates/erp-core/src && echo "" > crates/erp-core/src/lib.rs \
|
|
&& mkdir -p crates/erp-auth/src && echo "" > crates/erp-auth/src/lib.rs \
|
|
&& mkdir -p crates/erp-config/src && echo "" > crates/erp-config/src/lib.rs \
|
|
&& mkdir -p crates/erp-workflow/src && echo "" > crates/erp-workflow/src/lib.rs \
|
|
&& mkdir -p crates/erp-message/src && echo "" > crates/erp-message/src/lib.rs \
|
|
&& mkdir -p crates/erp-plugin/src && echo "" > crates/erp-plugin/src/lib.rs \
|
|
&& mkdir -p crates/erp-health/src && echo "" > crates/erp-health/src/lib.rs \
|
|
&& mkdir -p crates/erp-ai/src && echo "" > crates/erp-ai/src/lib.rs \
|
|
&& mkdir -p crates/erp-dialysis/src && echo "" > crates/erp-dialysis/src/lib.rs \
|
|
&& mkdir -p crates/erp-server/src && echo "fn main(){}" > crates/erp-server/src/main.rs \
|
|
&& mkdir -p crates/erp-server/migration/src && echo "" > crates/erp-server/migration/src/lib.rs \
|
|
&& for crate in erp-plugin-prototype erp-plugin-test-sample erp-plugin-assessment erp-plugin-crm erp-plugin-freelance erp-plugin-inventory erp-plugin-itops; do \
|
|
mkdir -p crates/$crate/src && echo "" > crates/$crate/src/lib.rs; \
|
|
done
|
|
|
|
# 构建依赖（仅当 Cargo.toml/Cargo.lock 变化时重新编译）
|
|
RUN cargo build --release -p erp-server 2>/dev/null || true
|
|
|
|
# 复制实际源码
|
|
COPY crates/ crates/
|
|
|
|
# 重新构建（增量编译，只编译业务代码）
|
|
RUN cargo build --release -p erp-server
|
|
|
|
# ==============================
|
|
# Stage 2: Build frontend
|
|
# ==============================
|
|
FROM node:20-alpine AS frontend-builder
|
|
|
|
WORKDIR /app
|
|
|
|
RUN corepack enable && corepack prepare pnpm@latest --activate
|
|
|
|
COPY apps/web/package.json apps/web/pnpm-lock.yaml ./apps/web/
|
|
|
|
RUN cd apps/web && pnpm install --frozen-lockfile
|
|
|
|
COPY apps/web/ ./apps/web/
|
|
|
|
RUN cd apps/web && pnpm build
|
|
|
|
# ==============================
|
|
# Stage 3: Production runtime
|
|
# ==============================
|
|
FROM debian:bookworm-slim AS runtime
|
|
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
ca-certificates \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
WORKDIR /app
|
|
|
|
# 复制 Rust 二进制
|
|
COPY --from=rust-builder /app/target/release/erp-server /app/erp-server
|
|
|
|
# 复制配置文件
|
|
COPY config/ /app/config/
|
|
|
|
# 复制前端构建产物
|
|
COPY --from=frontend-builder /app/apps/web/dist/ /app/static/
|
|
|
|
# 创建上传目录
|
|
RUN mkdir -p /app/uploads
|
|
|
|
# 非特权用户运行
|
|
RUN useradd -r -s /bin/false appuser \
|
|
&& chown -R appuser:appuser /app
|
|
USER appuser
|
|
|
|
# 环境变量（运行时通过 docker-compose 覆盖）
|
|
ENV ERP__SERVER__HOST=0.0.0.0
|
|
ENV ERP__SERVER__PORT=3000
|
|
ENV ERP__SERVER__METRICS_PORT=9090
|
|
ENV ERP__STORAGE__UPLOAD_DIR=/app/uploads
|
|
|
|
EXPOSE 3000 9090
|
|
|
|
VOLUME ["/app/uploads"]
|
|
|
|
HEALTHCHECK --interval=30s --timeout=5s --start-period=60s --retries=3 \
|
|
CMD curl -f http://localhost:3000/api/v1/health || exit 1
|
|
|
|
ENTRYPOINT ["/app/erp-server"]
|