FROM docker.io/node:20-alpine
WORKDIR /app
COPY package*.json ./
RUN npm ci
COPY src/ ./src/
COPY index.js ./

RUN addgroup -g 1001 uphold && adduser -S -G uphold -u 1001 uphold
USER uphold

ENTRYPOINT ["node", "index.js"]