FROM node:24-bookworm-slim@sha256:2fe369e969550cde8e867afc3fe370b260140cab4a23d467074295b42163d553
ENV NODE_ENV=production
WORKDIR /app
COPY package.json package-lock.json ./
RUN npm ci --omit=dev --no-audit --no-fund && mkdir /data && chown node:node /data
COPY --chown=node:node server.cjs templates.js ./
COPY --chown=node:node assets ./assets
USER node
EXPOSE 8090
CMD ["node", "server.cjs"]
