FROM node:18-alpine

# Set working directory
WORKDIR /app

# Copy package.json & package-lock.json (kalau ada)
COPY package*.json ./

# Install dependencies production-only
RUN npm install --only=production

# Copy source code
COPY . .

# Ubah kepemilikan agar aman di Kubernetes
RUN chown -R node:node /app
USER node

# Expose port 3000
EXPOSE 3000

# Jalankan app
CMD ["npm", "start"]