FROM node:18

WORKDIR /app

COPY package*.json ./
RUN npm install

COPY . .

# 🔒 Ubah kepemilikan dan pakai user non-root
RUN chown -R node:node /app
USER node

EXPOSE 3000

CMD ["npm", "start"]