FROM node:22-alpine

WORKDIR /app

COPY package*.json ./
RUN npm ci --omit=dev

COPY . .

# Don't run as root inside the container
USER node

EXPOSE 3000
CMD ["node", "server.js"]

