Dockerfile

# ── Build stage ────────────────────────────────────────────────────────────────
FROM node:20-alpine AS base
WORKDIR /app

COPY package*.json ./
RUN npm ci --omit=dev

COPY src ./src

# ── Runtime ────────────────────────────────────────────────────────────────────
FROM node:20-alpine AS runtime
WORKDIR /app

RUN addgroup -S stellar && adduser -S stellar -G stellar
RUN mkdir -p /app/data && chown stellar:stellar /app/data

COPY --from=base /app/node_modules ./node_modules
COPY --from=base /app/src ./src
COPY package.json ./

USER stellar

ENV NODE_ENV=production
ENV PORT=3000
ENV DB_PATH=/app/data/stellar-notify.db

EXPOSE 3000

HEALTHCHECK --interval=30s --timeout=5s --start-period=10s \
  CMD wget -qO- http://localhost:3000/api/health || exit 1

CMD ["node", "src/index.js"]