Dockerfile

## Attestor — Production Container
##
## Multi-stage build: compile TypeScript → slim runtime image
## Used by both API and Worker services (different CMD)
##
## API:    docker run attestor node dist/service/api-server.js
## Worker: docker run attestor node dist/service/worker.js

FROM node:22-alpine@sha256:8ea2348b068a9544dae7317b4f3aafcdc032df1647bb7d768a05a5cad1a7683f AS build
WORKDIR /app
ENV REDISMS_DISABLE_POSTINSTALL=true
COPY package*.json tsconfig.json ./
RUN npm ci --ignore-scripts --no-audit --no-fund && npm cache clean --force
COPY src/ src/
RUN npm run build && npm prune --production

FROM node:22-alpine@sha256:8ea2348b068a9544dae7317b4f3aafcdc032df1647bb7d768a05a5cad1a7683f
WORKDIR /app
COPY --from=build /app/dist ./dist
COPY --from=build /app/node_modules ./node_modules
COPY --from=build /app/package.json ./
ENV NODE_ENV=production
USER node
EXPOSE 3700
CMD ["node", "dist/service/api-server.js"]