FROM node:24-alpine

WORKDIR /app

# Install pnpm globally
RUN npm install -g pnpm

# Copy dependency files first for better caching
COPY package.json pnpm-lock.yaml ./

# Install dependencies
RUN pnpm install --frozen-lockfile --prod

# Copy application files
COPY server.js todo-service.js signal-crypto.js ./
COPY public/ ./public/

# Expose port
EXPOSE 3000

# Switch to non-root user
USER node

# Start application
CMD ["node", "server.js"]