FROM node:18
WORKDIR /app
COPY package*.json ./
RUN npm install
COPY . .
# 🔒 Ubah kepemilikan dan pakai user non-root
RUN chown -R node:node /app
USER node
EXPOSE 3000
CMD ["npm", "start"]