# ====== 1. Dependencies ====== FROM node:20-alpine AS deps WORKDIR /app COPY package.json package-lock.json* ./ RUN npm ci # ====== 2. Build ====== FROM node:20-alpine AS builder WORKDIR /app COPY --from=deps /app/node_modules ./node_modules COPY . . # Variables build-time ENV NEXT_TELEMETRY_DISABLED=1 RUN npm run build # ====== 3. Runner (prod minimal) ====== FROM node:20-alpine AS runner WORKDIR /app ENV NODE_ENV=production ENV NEXT_TELEMETRY_DISABLED=1 # user non-root (bonne pratique) RUN addgroup -S nextjs && adduser -S nextjs -G nextjs # Copy standalone output COPY --from=builder /app/public ./public COPY --from=builder /app/.next/standalone ./ COPY --from=builder /app/.next/static ./.next/static USER nextjs EXPOSE 3000 CMD ["node", "server.js"]