Dockerfile

# ===========================
# stage 1 - Dependencies
# ===========================
FROM node:20-alpine AS dependencies

WORKDIR /app

COPY package*.json ./

# Install all dependencies (including dev dependencies)
RUN npm install

# ===========================
# Stage 2 - Test
# ===========================
FROM dependencies AS test

WORKDIR /app

COPY . .

CMD ["npm", "test"]

# ===========================
# Stage 3 - Production Build
# ===========================
FROM node:20-alpine AS production

WORKDIR /app

# Create non-root user
RUN addgroup -S app && adduser -S app -G app

# Copy package files
COPY package*.json ./

# Install only production dependencies
RUN npm install --omit=dev

# Copy application source only
COPY src ./src

# Change ownership
RUN chown -R app:app /app

USER app

EXPOSE 3000

HEALTHCHECK --interval=10s --timeout=3s --retries=3 \
    CMD wget -qO- http://localhost:3000/health || exit 1

CMD ["node", "src/index.js"]