FROM node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7
WORKDIR /app
COPY package.json package-lock.json ./
RUN npm ci --omit=dev --ignore-scripts --no-audit --no-fund
COPY lib/ ./lib/
COPY pipeline/model.mjs ./pipeline/model.mjs
COPY ops/rofl/appd.mjs ops/rofl/signer.mjs ./ops/rofl/
COPY public/data/feed-public.pem ./public/data/feed-public.pem
USER node
EXPOSE 8080
CMD ["node", "ops/rofl/signer.mjs"]
