FROM node:18-alpine

WORKDIR /app

# Copy package files & install deps
COPY package*.json ./
RUN npm ci --only=production

# Copy source code
COPY . .

# 🔒 non-root user (aman di Kubernetes)
RUN chown -R node:node /app
USER node

EXPOSE 3000

# Jalankan React dev server / Express tergantung project kamu
CMD ["npm", "start"]