diff --git a/docker/Dockerfile b/docker/Dockerfile
new file mode 100644
index 0000000..68b50e3
--- /dev/null
+++ b/docker/Dockerfile
@@ -0,0 +1,44 @@
+FROM node:20-alpine AS base
+
+ARG CDN_DOMAIN
+ENV CDN_DOMAIN=${CDN_DOMAIN}
+
+FROM base AS deps
+RUN apk add --no-cache libc6-compat
+WORKDIR /app
+
+COPY package.json package-lock.json* ./
+RUN npm ci && npm cache clean --force
+
+FROM base AS builder
+WORKDIR /app
+COPY --from=deps /app/node_modules ./node_modules
+COPY . .
+
+ENV NEXT_TELEMETRY_DISABLED=1
+
+RUN npm run build
+
+FROM base AS runner
+WORKDIR /app
+
+ENV NODE_ENV=production
+ENV NEXT_TELEMETRY_DISABLED=1
+
+RUN addgroup --system --gid 1001 nodejs && \
+    adduser --system --uid 1001 nextjs
+
+COPY --from=builder /app/dist/standalone ./
+COPY --from=builder /app/dist/static ./dist/static
+COPY --from=builder /app/public ./public
+
+RUN chown -R nextjs:nodejs /app
+
+USER nextjs
+
+EXPOSE 3000
+
+ENV PORT=3000
+ENV HOSTNAME="0.0.0.0"
+
+CMD ["node", "server.js"]
\ No newline at end of file
diff --git a/docker/Dockerfile.prod b/docker/Dockerfile.prod
new file mode 100644
index 0000000..7e06227
--- /dev/null
+++ b/docker/Dockerfile.prod
@@ -0,0 +1,21 @@
+FROM node:20-alpine AS runner
+WORKDIR /app
+
+ENV NODE_ENV=production
+ENV NEXT_TELEMETRY_DISABLED=1
+ENV PORT=3000
+ENV HOSTNAME="0.0.0.0"
+
+RUN addgroup --system --gid 1001 nodejs && \
+    adduser --system --uid 1001 nextjs
+
+COPY dist/standalone/novalon-website/ ./
+COPY dist/static ./dist/static
+
+RUN chown -R nextjs:nodejs /app
+
+USER nextjs
+
+EXPOSE 3000
+
+CMD ["node", "server.js"]
diff --git a/docker/Dockerfile.tools b/docker/Dockerfile.tools
new file mode 100644
index 0000000..6ae52f2
--- /dev/null
+++ b/docker/Dockerfile.tools
@@ -0,0 +1,25 @@
+FROM --platform=linux/amd64 node:20-alpine
+
+# 安装额外的工具
+RUN apk add --no-cache \
+    git \
+    openssh-client \
+    curl \
+    bind-tools \
+    netcat-openbsd \
+    rsync
+
+# 设置时区
+RUN apk add --no-cache tzdata && \
+    cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime && \
+    echo "Asia/Shanghai" > /etc/timezone
+
+# 创建非root用户
+RUN addgroup -g 1001 appgroup && \
+    adduser -u 1001 -S appuser -G appgroup
+
+USER appuser
+
+WORKDIR /home/appuser
+
+CMD ["sh"]