FROM node:24-bookworm-slim AS build
WORKDIR /app
COPY package*.json ./
RUN npm ci --no-fund --no-audit
COPY index.html vite.config.js ./
COPY src ./src
COPY public ./public
RUN npm run build
FROM node:24-bookworm-slim
ENV NODE_ENV=production HOST=0.0.0.0 PORT=4188 DB_PATH=/data/stockroom.sqlite SANDBOX_ENABLED=0 COOKIE_SECURE=1 TRUST_PROXY=1
WORKDIR /app
COPY package*.json ./
RUN npm ci --omit=dev --no-fund --no-audit && mkdir /data && chown node:node /data
COPY --from=build /app/dist ./dist
COPY server ./server
COPY scripts ./scripts
USER node
VOLUME /data
EXPOSE 4188
HEALTHCHECK --interval=30s --timeout=5s CMD node -e "fetch('http://127.0.0.1:4188/api/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"
CMD ["node","server/index.js"]
