FROM node:18

WORKDIR /app

COPY package*.json ./
RUN npm install

COPY . .

# 🔒 Ganti kepemilikan direktori ke user "node" bawaan image
RUN chown -R node:node /app

# 🔒 Jalankan container dengan user non-root
USER node

EXPOSE 5000

CMD ["node", "server.js"]