FROM node:24-bookworm-slim AS dependencies
WORKDIR /app
COPY package.json package-lock.json ./
RUN npm ci --ignore-scripts \
  && node node_modules/esbuild/install.js

FROM dependencies AS build
COPY . .
RUN npm run build
RUN npm prune --omit=dev --ignore-scripts

FROM node:24-bookworm-slim AS runtime
ENV NODE_ENV=production
WORKDIR /app
RUN groupadd --system productissue \
  && useradd --system --gid productissue --home-dir /app productissue \
  && mkdir -p /app/data \
  && chown -R productissue:productissue /app
COPY --from=build --chown=productissue:productissue /app/package.json /app/package-lock.json ./
COPY --from=build --chown=productissue:productissue /app/node_modules ./node_modules
COPY --from=build --chown=productissue:productissue /app/dist ./dist
USER productissue
EXPOSE 3000
CMD ["node", "dist/server/server/main.js"]