# ===== Quantaris Finance — Dockerfile =====
FROM node:20-alpine AS base

WORKDIR /app

# Install dependencies
COPY package*.json ./
RUN npm ci --production

# Copy source
COPY backend/ ./backend/
COPY config/ ./config/
COPY frontend/ ./frontend/

# Non-root user
RUN addgroup -g 1001 quantaris && \
    adduser -u 1001 -G quantaris -s /bin/sh -D quantaris && \
    chown -R quantaris:quantaris /app

USER quantaris

EXPOSE 3001

HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
  CMD wget -qO- http://localhost:3001/api/health || exit 1

CMD ["node", "backend/server.js"]