Dockerfile

# Build stage
FROM node:20-alpine AS build

WORKDIR /app

COPY package.json ./
# Hinweis: npm ci mit package-lock.json verwenden, sobald verfügbar
RUN npm install

COPY . .
RUN npm run build

# Production stage
FROM nginx:alpine

# Copy nginx config and built files with correct ownership
COPY --chown=nginx:nginx nginx.conf /etc/nginx/conf.d/default.conf
COPY --chown=nginx:nginx --from=build /app/dist /usr/share/nginx/html

# Ensure nginx runtime directories are writable by non-root user
RUN chown -R nginx:nginx /var/cache/nginx && \
    chown -R nginx:nginx /var/log/nginx && \
    touch /var/run/nginx.pid && \
    chown nginx:nginx /var/run/nginx.pid

USER nginx

EXPOSE 8080

CMD ["nginx", "-g", "daemon off;"]