Dockerfile

# ─────────────────────────────────────────────────────────────────────────────
# Stage 1: Build
# ─────────────────────────────────────────────────────────────────────────────
FROM node:22-alpine AS builder

WORKDIR /app

# Install dependencies first (layer-cached unless package.json changes)
COPY package*.json ./
RUN npm ci

# Copy source and build
COPY . .
RUN npm run build

# ─────────────────────────────────────────────────────────────────────────────
# Stage 2: Production runtime
# ─────────────────────────────────────────────────────────────────────────────
FROM node:22-alpine AS runner

WORKDIR /app

ENV NODE_ENV=production

# Next.js telemetry opt-out
ENV NEXT_TELEMETRY_DISABLED=1

# Add a non-root user for security
RUN addgroup --system --gid 1001 nodejs && \
    adduser  --system --uid 1001 nextjs

# Copy built output
COPY --from=builder --chown=nextjs:nodejs /app/.next      ./.next
COPY --from=builder --chown=nextjs:nodejs /app/public     ./public
COPY --from=builder --chown=nextjs:nodejs /app/node_modules ./node_modules
COPY --from=builder --chown=nextjs:nodejs /app/package.json ./package.json

USER nextjs

EXPOSE 3000

ENV PORT=3000
ENV HOSTNAME="0.0.0.0"

# LLM connection (override at container start via -e or ECS task env)
# ENV LLM_BASE_URL=http://ollama:11434/v1
# ENV LLM_API_KEY=ollama
# ENV LLM_DEFAULT_MODEL=llama3.1:8b

CMD ["node_modules/.bin/next", "start"]