FROM node:20-bookworm-slim

WORKDIR /app

COPY package.json package-lock.json ./
RUN npm i

COPY . .
RUN useradd -ms /bin/bash user
USER user

CMD ["node", "index.js"]