FROM node:24-alpine

WORKDIR /app

# Copy dependency files first for better caching
COPY package.json package-lock.json ./

# Install dependencies
RUN npm install --prod

# Copy application files
COPY server.js todo-service.js signal-crypto.js ./
COPY public/ ./public/

# Expose port
EXPOSE 3000

# Switch to non-root user
USER node

# Start application
CMD ["node", "server.js"]