69 lines
2.8 KiB
Docker
69 lines
2.8 KiB
Docker
# Multi-stage API image + EF migration bundle.
|
|
# docker build -f VigilCareClinicalAPI/Dockerfile . → runtime (default)
|
|
# docker build -f VigilCareClinicalAPI/Dockerfile --target migrate . → /out/migrate-api
|
|
FROM mcr.microsoft.com/dotnet/sdk:8.0 AS src
|
|
WORKDIR /src
|
|
|
|
# Restore layer — copy only project files so NuGet restore is cached
|
|
# independently of source changes. ProjectReferences must be present.
|
|
COPY VigilCareClinical.sln ./
|
|
COPY VigilCare.ClinicalContracts/VigilCare.ClinicalContracts.csproj VigilCare.ClinicalContracts/
|
|
COPY VigilCare.Simulation.Core/VigilCare.Simulation.Core.csproj VigilCare.Simulation.Core/
|
|
COPY VigilCareClinicalAPI/VigilCareClinicalAPI.csproj VigilCareClinicalAPI/
|
|
RUN dotnet restore VigilCareClinicalAPI/VigilCareClinicalAPI.csproj
|
|
|
|
COPY VigilCare.ClinicalContracts/ VigilCare.ClinicalContracts/
|
|
COPY VigilCare.Simulation.Core/ VigilCare.Simulation.Core/
|
|
COPY VigilCareClinicalAPI/ VigilCareClinicalAPI/
|
|
|
|
FROM src AS build
|
|
RUN dotnet publish VigilCareClinicalAPI/VigilCareClinicalAPI.csproj \
|
|
-c Release -o /app/publish --no-restore
|
|
|
|
# Scrub development secrets from the published appsettings.json (Step 4).
|
|
# Production supplies Jwt / PHI / API keys via environment variables only.
|
|
RUN sed -i \
|
|
-e 's/"SigningKey": "[^"]*"/"SigningKey": ""/' \
|
|
-e 's/"SearchTokenKey": "[^"]*"/"SearchTokenKey": ""/' \
|
|
-e 's/"Gateway": "dev-[^"]*"/"Gateway": ""/' \
|
|
-e 's/"ApiKey": "dev-integration[^"]*"/"ApiKey": ""/' \
|
|
/app/publish/appsettings.json
|
|
|
|
# Self-contained EF bundle for CD (docker build --target migrate).
|
|
# Prefer docker build over docker run -v on act_runner — bind mounts resolve
|
|
# on the Docker host, not the job workspace.
|
|
FROM src AS migrate
|
|
RUN dotnet tool install --global dotnet-ef --version 8.0.4 \
|
|
&& export PATH="$PATH:/root/.dotnet/tools" \
|
|
&& mkdir -p /out \
|
|
&& dotnet ef migrations bundle \
|
|
--project VigilCareClinicalAPI \
|
|
--startup-project VigilCareClinicalAPI \
|
|
--configuration Release \
|
|
--self-contained -r linux-x64 \
|
|
--output /out/migrate-api \
|
|
--force
|
|
|
|
FROM mcr.microsoft.com/dotnet/aspnet:8.0 AS runtime
|
|
WORKDIR /app
|
|
|
|
# curl is required by the container healthcheck; the aspnet image does not ship it.
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends curl \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
COPY --from=build /app/publish .
|
|
|
|
# The keyring directory must be owned by the runtime user — see Step 10.
|
|
# The aspnet:8.0 image ships a non-root `app` user (uid 1654).
|
|
RUN mkdir -p /app/data-protection-keys && chown -R app:app /app
|
|
USER app
|
|
|
|
ENV ASPNETCORE_URLS=http://+:8080
|
|
EXPOSE 8080
|
|
|
|
HEALTHCHECK --interval=30s --timeout=5s --start-period=40s --retries=3 \
|
|
CMD curl -fsS http://localhost:8080/health/live || exit 1
|
|
|
|
ENTRYPOINT ["dotnet", "VigilCareClinicalAPI.dll"]
|