FROM node:22-alpine

WORKDIR /app

RUN adduser -D app

COPY package.json package-lock.json ./
RUN npm ci

COPY . .

USER app

CMD [ "node", "app.js" ]