# Build stage
FROM node:20-alpine AS builder
WORKDIR /app
COPY package*.json ./
RUN npm ci --only=production=false
COPY tsconfig.json ./
COPY src ./src
RUN npm run build
RUN npm prune --production

# Production stage
FROM node:20-alpine AS production
WORKDIR /app
RUN addgroup -g 1001 -S nodejs && adduser -S products -u 1001
COPY --from=builder --chown=products:nodejs /app/node_modules ./node_modules
COPY --from=builder --chown=products:nodejs /app/dist ./dist
COPY --from=builder --chown=products:nodejs /app/package.json ./
RUN mkdir -p logs && chown products:nodejs logs
USER products
EXPOSE 3091
HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
  CMD wget --no-verbose --tries=1 --spider http://localhost:3091/health || exit 1
CMD ["node", "dist/index.js"]