use workdir and run as non root user (Unleash#39)

Signed-off-by: André Bauer <[email protected]>

Author: monotek

Dockerfile

@@ -1,13 +1,21 @@
-FROM node:12-alpine
+FROM node:12-alpine as builder
 
-ENV NODE_ENV production
+WORKDIR /unleash
 
-COPY package.json package-lock.json ./
+COPY index.js package.json package-lock.json ./
 
 RUN npm ci
 
-COPY . .
+FROM node:12-alpine
+
+ENV NODE_ENV production
+
+WORKDIR /unleash
+
+COPY --from=builder /unleash /unleash
 
 EXPOSE 4242
 
+USER node
+
 CMD node index.js