3 Commits

Include renames

Author	SHA1	Message	Date
MichaelandClaude Haiku 4.5	f8f4f96169	security: run Docker container as non-root node user ... Defense in depth — drop root in the production image. The official node:alpine image ships a "node" user (uid 1000); chown /app and switch with USER node so a compromise can't write outside the app directory. Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>	2026-04-18 07:25:42 +02:00
MichaelandClaude Haiku 4.5	faec1f37b4	fix: use npm install instead of npm ci (no lockfile in repo) ... Also unignore package-lock.json for future deterministic installs. Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>	2026-04-16 10:55:28 +02:00
MichaelandClaude Haiku 4.5	1822ab1afe	fix: single container without nginx — Express serves frontend ... - Remove separate backend/ and frontend/ Dockerfiles - Add root Dockerfile (3-stage: frontend build → backend build → runtime) - Frontend static files served by Express from /public - Simplify docker-compose to 3 services: mongodb, redis, app (port 3579) - Fix vite proxy not to strip /api prefix from paths - Default API URL to relative /api instead of hardcoded localhost Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>	2026-04-16 10:43:06 +02:00