- 服务端权威状态机:落子校验、四方向五连判胜、悔棋请求、认输、离线判负、交换黑白再来一局 - 断线重连:resumeToken 凭证 + localStorage,刷新/锁屏自动回到原座位 - 移动端 Canvas 棋盘:DPR 适配、触摸容差吸附、最后一手标记、胜利连子高亮 - Docker 多阶段构建,非 root + 只读根文件系统 - k8s 清单:单副本 Recreate(内存态房态)、Ingress WebSocket 超时与粘性会话注释
36 lines
1.1 KiB
Docker
36 lines
1.1 KiB
Docker
# syntax=docker/dockerfile:1
|
|
|
|
# ---------- 构建阶段:安装全部依赖并产出 dist-server / dist-web ----------
|
|
FROM node:20-bookworm-slim AS build
|
|
WORKDIR /app
|
|
|
|
COPY package.json package-lock.json ./
|
|
RUN npm ci --no-audit --no-fund
|
|
|
|
COPY tsconfig.server.json tsconfig.web.json vite.config.ts ./
|
|
COPY shared ./shared
|
|
COPY server ./server
|
|
COPY web ./web
|
|
RUN npm run build
|
|
|
|
# ---------- 运行阶段:仅装生产依赖,只带构建产物 ----------
|
|
FROM node:20-bookworm-slim AS runtime
|
|
ENV NODE_ENV=production \
|
|
PORT=3000
|
|
WORKDIR /app
|
|
|
|
COPY package.json package-lock.json ./
|
|
RUN npm ci --omit=dev --no-audit --no-fund && npm cache clean --force
|
|
|
|
COPY --from=build /app/dist-server ./dist-server
|
|
COPY --from=build /app/dist-web ./dist-web
|
|
|
|
# node 镜像自带 uid=1000 的 node 用户,配合 k8s 的 runAsNonRoot 使用
|
|
USER node
|
|
EXPOSE 3000
|
|
|
|
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
|
|
CMD node -e "fetch('http://127.0.0.1:'+process.env.PORT+'/healthz').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"
|
|
|
|
CMD ["node", "dist-server/server/index.js"]
|