FROM node:22-bookworm-slim
ENV NODE_ENV=production NEXT_TELEMETRY_DISABLED=1 HOSTNAME=0.0.0.0 PORT=3000 AUTH_CONFIG_FILE=/auth/config.json AUTH_COOKIE_SECURE=false
WORKDIR /app
# Context is the verified standalone artifact, never the source checkout.
COPY --chown=node:node . .
RUN mkdir -p /auth && chown node:node /auth && chmod 700 /auth
USER node
EXPOSE 3000
HEALTHCHECK --interval=10s --timeout=5s --start-period=10s --retries=6 \
  CMD node -e "fetch('http://127.0.0.1:3000/api/health').then(r=>{if(!r.ok)process.exit(1)}).catch(()=>process.exit(1))"
CMD ["node", "apps/docs/server.js"]