You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
43 lines
950 B
43 lines
950 B
# 使用OpenJDK 17作为基础镜像
|
|
FROM openjdk:17-jre-alpine
|
|
|
|
# 设置工作目录
|
|
WORKDIR /app
|
|
|
|
# 创建证书目录
|
|
RUN mkdir -p /app/certs
|
|
|
|
# 创建日志目录
|
|
RUN mkdir -p /app/logs
|
|
|
|
# 创建上传文件目录
|
|
RUN mkdir -p /app/uploads
|
|
|
|
# 添加应用用户（安全考虑）
|
|
RUN addgroup -g 1000 appgroup && \
|
|
adduser -D -s /bin/sh -u 1000 -G appgroup appuser
|
|
|
|
# 复制jar包到容器
|
|
COPY target/*.jar app.jar
|
|
|
|
# 设置目录权限
|
|
RUN chown -R appuser:appgroup /app
|
|
|
|
# 切换到应用用户
|
|
USER appuser
|
|
|
|
# 暴露端口
|
|
EXPOSE 9200
|
|
|
|
# 设置JVM参数
|
|
ENV JAVA_OPTS="-Xms512m -Xmx1024m -Djava.security.egd=file:/dev/./urandom"
|
|
|
|
# 设置Spring Profile
|
|
ENV SPRING_PROFILES_ACTIVE=prod
|
|
|
|
# 健康检查
|
|
HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=3 \
|
|
CMD wget --no-verbose --tries=1 --spider http://localhost:9200/actuator/health || exit 1
|
|
|
|
# 启动应用
|
|
ENTRYPOINT ["sh", "-c", "java $JAVA_OPTS -jar app.jar"]
|