FROM node:20-alpine AS base ENV TZ=Asia/Tehran RUN apk add --no-cache tzdata RUN corepack enable WORKDIR /app # ----------------------- # Install ALL dependencies (dev + prod) for the build # ----------------------- FROM base AS deps COPY package.json yarn.lock ./ # NODE_ENV must not be "production" here — otherwise devDependencies # (e.g. @nestjs/cli) are skipped and "nest build" fails. ENV NODE_ENV=development RUN yarn install --frozen-lockfile # ----------------------- # Builder stage # ----------------------- FROM base AS builder WORKDIR /app ENV NODE_ENV=development COPY package.json yarn.lock nest-cli.json tsconfig.json tsconfig.build.json ./ COPY --from=deps /app/node_modules ./node_modules COPY src ./src RUN yarn build \ && mkdir -p dist/config \ && cp src/config/swagger.json dist/config/ # ----------------------- # Production dependencies ONLY # ----------------------- FROM base AS prod-deps COPY package.json yarn.lock ./ ENV NODE_ENV=production RUN yarn install --frozen-lockfile --production=true # ----------------------- # Runner # ----------------------- FROM base AS runner RUN addgroup -S appgroup && adduser -S appuser -G appgroup WORKDIR /app ENV NODE_ENV=production COPY --from=prod-deps --chown=appuser:appgroup /app/node_modules ./node_modules COPY --from=builder --chown=appuser:appgroup /app/dist ./dist COPY --from=builder --chown=appuser:appgroup /app/package.json ./package.json USER appuser EXPOSE 3000 CMD ["node", "dist/main"]