FROM node:22.22.1-bookworm-slim
WORKDIR /lab
COPY package.json package-lock.json ./
RUN npm ci --omit=dev --ignore-scripts
COPY src/crypto.mjs src/crypto.mjs
COPY guard-policy.mjs server.mjs ./
COPY dist ./dist
USER node
CMD ["node","server.mjs"]
