FROM nginx:1.29-alpine@sha256:5616878291a2eed594aee8db4dade5878cf7edcb475e59193904b198d9b830de

RUN adduser -D -u 1000 user

COPY nginx.conf /etc/nginx/nginx.conf
COPY --chown=user:user dist/ /home/user/app/

USER user
EXPOSE 7860

HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
  CMD wget -qO- http://127.0.0.1:7860/healthz || exit 1

CMD ["nginx", "-g", "daemon off;"]