From f79843d5b6d34cdc64293dae1ce48175533b9252 Mon Sep 17 00:00:00 2001
From: orfelorfel23 <jannik.mueller.jannik+git@googlemail.com>
Date: Sun, 6 Sep 2026 20:14:28 +0200
Subject: [PATCH] build: optimize Dockerfile for production and improve
 .dockerignore

---
 .dockerignore | 2 ++
 Dockerfile    | 8 ++++++--
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/.dockerignore b/.dockerignore
index 8dcf07a..36920ae 100644
--- a/.dockerignore
+++ b/.dockerignore
@@ -1,5 +1,7 @@
 node_modules
+**/node_modules
 .git
+.gitignore
 .env
 db
 docs
diff --git a/Dockerfile b/Dockerfile
index 570df53..44978ce 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -7,14 +7,18 @@ RUN apk add --no-cache ffmpeg chromaprint
 
 # Install dependencies
 COPY server/package*.json ./server/
-RUN cd server && npm install --production
+RUN cd server && npm ci --omit=dev
 
 # Copy app source
 COPY server/ ./server/
 COPY public/ ./public/
 COPY shared/ ./shared/
 
+# Set ownership and switch to non-root user
+RUN chown -R node:node /app
+USER node
+
 # Start server
 WORKDIR /app/server
 EXPOSE 3000
-CMD ["npm", "start"]
+CMD ["node", "index.js"]