1

server/Dockerfile

@@ -0,0 +1,23 @@
+ARG NODE_IMAGE="node"
+ARG NODE_VERSION="16.17.1-slim"
+
+FROM ${NODE_IMAGE}:${NODE_VERSION}
+
+WORKDIR /project
+
+COPY package.json package-lock.json /project/
+
+RUN npm ci --no-audit --no-fund
+
+COPY --chown=node:node . /project/
+
+RUN chown node:node /project -R && \
+    find /project -type d -exec chmod 0750 {} \; && \
+    find /project -type f -exec chmod 0650 {} \; && \
+    ls -la /project && \
+    find /project ! -path '/project/node_modules/*' 
+
+# Run as node (user id 1000)
+USER node
+
+CMD ["node", "/project/app.js"]