first commit

backend/Dockerfile

@@ -0,0 +1,41 @@
+# ╔══════════════════════════════════════════════╗
+# ║  Backend Dockerfile – multi-stage            ║
+# ╚══════════════════════════════════════════════╝
+
+# ── Stage 1: deps (incl. native build tools) ─────
+FROM node:22-alpine AS deps
+WORKDIR /app
+COPY package.json package-lock.json* ./
+RUN npm install && npm cache clean --force
+
+# ── Stage 2: development (hot reload via --watch) ─
+FROM deps AS development
+COPY . .
+EXPOSE 3001
+CMD ["node", "--watch", "src/server.js"]
+
+# ── Stage 3: productie-deps (apart gebouwd) ───────
+FROM deps AS prod-deps
+RUN npm prune --omit=dev
+
+# ── Stage 4: production (minimale image) ──────────
+FROM node:22-alpine AS production
+LABEL maintainer="VibeFinance"
+
+RUN addgroup -S appgroup && adduser -S appuser -G appgroup
+
+WORKDIR /app
+
+COPY --from=prod-deps /app/node_modules ./node_modules
+COPY package.json ./
+COPY src/ ./src/
+
+RUN chown -R appuser:appgroup /app
+USER appuser
+
+EXPOSE 3001
+
+HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
+    CMD wget -qO- http://localhost:3001/api/health || exit 1
+
+CMD ["node", "src/server.js"]