FROM node:24-bookworm-slim
ENV NODE_ENV=production
WORKDIR /app
COPY package.json package-lock.json ./
RUN npm ci --omit=dev --ignore-scripts && npm cache clean --force
COPY service/ ./service/
RUN test -s service/public/source.tar.gz
USER node
EXPOSE 8787
CMD ["node", "service/start.mjs"]
