【AI全栈】前端转全栈需了解的 Docker + CI/CD 核心知识

1
# 阶段 1：基础镜像（Node + pnpm）
2
FROM node:22-slim AS base
3
RUN npm install -g pnpm@10.8.0
4
WORKDIR /app
5

6
# 阶段 2：运行时基础（系统依赖，如 PDF 导出用的中文字体）
7
FROM base AS runtime-base
8
RUN apt-get update && apt-get install -y fonts-noto-cjk
9

10
# 阶段 3：依赖安装（利用缓存 —— 只复制 package.json）
11
FROM base AS deps
12
COPY pnpm-lock.yaml pnpm-workspace.yaml ./
13
COPY apps/server/package.json apps/server/package.json
14
COPY packages/*/package.json packages/*/package.json
15
RUN pnpm install --frozen-lockfile --filter @my-resume/server...
16

17
# 阶段 4：构建（编译 TypeScript → dist）
18
FROM deps AS builder
19
COPY . .
20
RUN pnpm --filter @my-resume/server build
21
RUN pnpm --filter @my-resume/server deploy --legacy --prod /prod/server
22

23
# 阶段 5：运行（只复制必要产物，镜像最小化）
24
FROM runtime-base AS runner
25
ENV NODE_ENV=production
26
COPY --from=builder /prod/server/node_modules ./node_modules
27
COPY --from=builder /app/apps/server/dist ./apps/server/dist
28
CMD ["node", "apps/server/dist/src/main.js"]

1
FROM node:22-slim AS base          # 基础环境
2
# ...
3
FROM base AS deps                   # 依赖安装
4
# ...
5
FROM deps AS builder                # Next.js build (输出 .next/standalone)
6
ARG NEXT_PUBLIC_API_BASE_URL        # 构建时注入 API 地址
7
RUN pnpm --filter @my-resume/web build
8

9
FROM base AS runner                 # 运行层：只复制 standalone 产物
10
COPY --from=builder /app/apps/web/.next/standalone ./
11
COPY --from=builder /app/apps/web/.next/static ./apps/web/.next/static
12
CMD ["node", "apps/web/server.js"]

1
services:
2
  server:
3
    build:                         # 或 image: ghcr.io/... 镜像模式
4
      context: .
5
      dockerfile: apps/server/Dockerfile
6
    env_file:
7
      - .env                       # 运行时配置（JWT、数据库、AI Provider 等）
8
    ports:
9
      - '5577:5577'
10
    volumes:
11
      - resume_sqlite_data:/app/.data   # SQLite 数据库持久化
12

13
  web:
14
    build:
15
      dockerfile: apps/web/Dockerfile
16
      args:
17
        NEXT_PUBLIC_API_BASE_URL: http://localhost:5577   # 构建时注入
18
        RESUME_API_BASE_URL: http://server:5577           # SSR 内部调用
19
    depends_on:
20
      - server                     # 启动顺序（只保证顺序，不等就绪）
21
    ports:
22
      - '5555:5555'
23

24
  admin:
25
    build:
26
      dockerfile: apps/admin/Dockerfile
27
      args:
28
        NEXT_PUBLIC_API_BASE_URL: http://localhost:5577
29
    depends_on:
30
      - server
31
    ports:
32
      - '5566:5566'
33

34
volumes:
35
  resume_sqlite_data:              # 命名卷：数据不随容器销毁而丢失

1
1. CI 检查     代码合格（test、typecheck、build 验证）
2
     ↓
3
2. Build      构建镜像，push 到 GHCR，打上版本 tag
4
     ↓
5
3. CD 部署     ECS 拉指定 tag，创建 release snapshot，compose up