FROM node:24-alpine
WORKDIR /src
COPY package.json package-lock.json ./
RUN npm ci --omit=dev
COPY app/ ./app/
COPY public/ ./public/
RUN chown -R node:node /src
ENV NODE_ENV=production
USER node
EXPOSE 3000
CMD ["npm", "start"]
