From 31a6b7f2c9956662a93f4d1652e3667c580e8ec6 Mon Sep 17 00:00:00 2001
From: Beda Schmid <beda@tukutoi.com>
Date: Fri, 8 May 2026 19:18:32 -0300
Subject: [PATCH] update dockerfile

---
 Dockerfile | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index ac086ac..da8d36e 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,16 +1,17 @@
-FROM node:22-alpine
+FROM node:20-bookworm-slim
 
 ENV NODE_ENV=production
 WORKDIR /app
 
 COPY package.json package-lock.json ./
-RUN npm ci --omit=dev && npm cache clean --force
+RUN npm ci --omit=dev --no-audit --no-fund && npm cache clean --force
 
 COPY server.js ./server.js
 COPY src ./src
 COPY public ./public
 
-RUN addgroup -S meme && adduser -S meme -G meme \
+RUN groupadd --system --gid 10001 meme \
+  && useradd --system --uid 10001 --gid meme --home-dir /app --shell /usr/sbin/nologin meme \
   && mkdir -p /data \
   && chown -R meme:meme /data /app