feat(docker): safer dockerfile (#65)

Author: Senderman

Dockerfile

@@ -1,19 +1,25 @@
-FROM haxe:4.3-alpine
-WORKDIR /usr/src/app
+FROM haxe:4.3-alpine3.22
 
 RUN apk add nodejs npm git
 
+USER 0
+RUN addgroup -g 1000 app && adduser -u 1000 -G app -s /bin/sh -D app && mkdir /app
+WORKDIR /app
+
 COPY res ./res
 COPY src ./src
 COPY user ./user
 COPY build-*.hxml ./
 COPY package*.json ./
 COPY default-config.json ./
 
+RUN chown -R app:app /app
+
+USER 1000
 RUN npm ci;
-RUN haxelib install all --always
-RUN haxe build-all.hxml
+RUN haxelib setup /app \
+    && haxelib install all --always && \
+    haxe build-all.hxml
 
-EXPOSE 4200
+ENTRYPOINT [ "npm", "start" ]
 
-CMD npm start