harden

Author: jackkav

Dockerfile

@@ -1,14 +1,11 @@
-FROM node:21-alpine
-
-# Create app directory
-WORKDIR /mockbin
-
-RUN npm update -g npm
-
-COPY package.json ./
-RUN npm i --omit=dev
-COPY . .
-
+FROM node:21.6.2-bullseye-slim
+
+RUN RUN apt-get update && apt-get install -y --no-install-recommends dumb-init
+ENV NODE_ENV production
+WORKDIR /usr/src/app
+COPY --chown=node:node . .
+RUN npm ci --only=production
+USER node
 ENV MOCKBIN_REDIS "redis://redis:6379"
 EXPOSE 8080
-CMD ["npm", "start"]
+CMD ["dumb-init", "node", "server.js"]