Medusa Dockerfile generator

Needs attention: Production needs Redis

The default in-memory event bus and job queue do not survive a restart and cannot be shared between the server and the worker. Turn Redis on in the fields above.

Good practice: Multi-stage build (4 stages)

Compilers, dev dependencies and source files stay in the build stages. Only the runtime artefacts are copied into the final image.

Good practice: Runs as node, not root

A container escape from a root process is a host root process. Dropping privileges is the cheapest hardening step there is.

Good practice: .dockerignore keeps secrets out of the build context

`.git`, `.env` and local dependency folders never reach the daemon, so they cannot end up in a layer or in `docker history`.

Good practice: Dependency cache persists across builds

BuildKit cache mounts keep the package manager store outside the image. Rebuilds after a lockfile change reuse everything already downloaded, and the cache adds nothing to the final size.

Good practice: Healthcheck defined

Docker, Compose and Easypanel can tell the difference between a running process and a working app, and restart it when it wedges.

Note: Requires BuildKit

BuildKit is the default builder in Docker 23 and later. On anything older, export `DOCKER_BUILDKIT=1` before building.

Note: Server and worker are separate deployments

Medusa 2 splits HTTP handling from background jobs. Run a second container from the same image with MEDUSA_WORKER_MODE=worker so long jobs never block requests.

Note: Estimated image size: ~130–220 MB

A rough band for the final stage, before your own dependencies. Run `docker images` after a build for the real number.