FROM node:24.22.2-bookworm-slim
WORKDIR /app
COPY package.json package-lock.json ./
RUN npm ci --no-audit --no-fund
COPY . .
RUN npm run build && npm test
USER node
ENV HOST=0.0.0.0 PORT=8135
EXPOSE 8135
CMD ["node", "server.mjs"]
