FROM node:22-alpine

WORKDIR /app

COPY package.json package-lock.json ./
RUN npm ci --omit=dev

# Only Node and application dependencies are needed at runtime.
RUN npm uninstall --global npm

COPY src/ ./src/

EXPOSE 3200

USER node

CMD ["node", "src/index.js"]