FROM docker.io/library/node:lts-alpine

RUN apk add --no-cache make && \
    corepack enable

RUN addgroup -g 1001 -S nodejs && \
    adduser -S canvas -u 1001 -G nodejs

WORKDIR /canvas
RUN chown -R canvas:nodejs /canvas

USER canvas

COPY --chown=canvas:nodejs package.json pnpm-lock.yaml ./

RUN pnpm install --frozen-lockfile

COPY --chown=canvas:nodejs . .

EXPOSE 5173

CMD ["make", "start"]