feat: production Docker image with health check and data persistence

- Non-root user (node), data volume at /app/data
- Startup migration script applies drizzle SQL before server starts
- HEALTHCHECK on port 3000 every 30s

1 files changed, 9 insertions, 2 deletions

diff --git a/Dockerfile b/Dockerfile
index 8f2c00b..d7811ed 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -11,7 +11,14 @@ WORKDIR /app
 COPY --from=builder /app/build build/
 COPY --from=builder /app/node_modules node_modules/
 COPY --from=builder /app/package.json ./
+COPY --from=builder /app/drizzle drizzle/
+COPY --from=builder /app/scripts/migrate.js scripts/migrate.js
+RUN mkdir -p /app/data && chown -R node:node /app
+VOLUME /app/data
 EXPOSE 3000
 ENV NODE_ENV=production
-ENV DATABASE_URL=file:./data.db
-CMD ["node", "build"]
+ENV DATABASE_URL=file:./data/data.db
+HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
+	CMD node -e "require('http').get('http://localhost:3000/', r => {process.exit(r.statusCode === 200 ? 0 : 1)})"
+USER node
+CMD ["sh", "-c", "node scripts/migrate.js && node build"]