| # Multi-Stage Production Dockerfile for CFI Frontend SPA | |
| # Stage 1: Build production bundle | |
| FROM node:22-alpine AS builder | |
| WORKDIR /app | |
| # Copy package manifests first for optimal layer caching | |
| COPY frontend/package.json frontend/package-lock.json ./ | |
| RUN npm ci --prefer-offline --no-audit | |
| # Copy source code and configuration files | |
| COPY frontend/ ./ | |
| # Build production distribution | |
| RUN npm run build | |
| # Stage 2: Minimalist, hardened Nginx runtime | |
| FROM nginx:1.27-alpine-slim AS runtime | |
| # Remove default Nginx welcome site | |
| RUN rm -rf /usr/share/nginx/html/* /etc/nginx/conf.d/default.conf | |
| # Copy custom SPA Nginx configuration | |
| COPY docker/nginx/frontend-nginx.conf /etc/nginx/conf.d/default.conf | |
| # Copy compiled assets from builder | |
| COPY --from=builder /app/dist /usr/share/nginx/html | |
| EXPOSE 80 | |
| HEALTHCHECK --interval=10s --timeout=3s --retries=3 \ | |
| CMD wget -qO- http://127.0.0.1/health || exit 1 | |
| CMD ["nginx", "-g", "daemon off;"] | |