Merge pull request #130 from Danitello123/feature/102-optimize-keeper-docker

Feature/102 optimize keeper docker

Author: ayomideadeniran

keeper/Dockerfile

@@ -1,45 +1,39 @@
 # ─────────────────────────────────────────────────────────────────────────────
 # Stage 1 – deps
-#   Install *production-only* dependencies so they can be copied cleanly into
-#   the final image without devDependencies or build tooling.
+#   Install production-only dependencies for cache-efficient builds.
 # ─────────────────────────────────────────────────────────────────────────────
 FROM node:20-alpine AS deps
 
 WORKDIR /app
 
-# Copy dependency manifests first to maximise layer caching.
-# If neither file changes, Docker skips the npm ci step on rebuilds.
+# Copy package manifests first for better layer caching.
 COPY package*.json ./
 
-# Install production deps only — keep the image lean.
-RUN npm ci --omit=dev
+# Install production dependencies only.
+RUN npm ci --omit=dev && npm cache clean --force
 
 # ─────────────────────────────────────────────────────────────────────────────
-# Stage 2 – runner
-#   Final, minimal runtime image. Nothing from devDependencies makes it in.
+# Stage 2 – final runtime
+#   Minimal runtime image with production assets only.
 # ─────────────────────────────────────────────────────────────────────────────
 FROM node:20-alpine AS runner
 
 WORKDIR /app
-
 ENV NODE_ENV=production
 
-# Copy production node_modules from the deps stage.
+# Copy prod dependencies from the deps stage.
 COPY --from=deps /app/node_modules ./node_modules
 
-# Copy application source.
+# Copy application files (excluding ignored files in .dockerignore).
 COPY . .
 
-# Create the data directory and set ownership to the unprivileged 'node' user
-# before we switch to that user, so the process can write tasks.json.
+# Create runtime data directory and set safe permissions.
 RUN mkdir -p /app/data && chown -R node:node /app/data
 
-# Expose the metrics / health-check port (MetricsServer default: 3000).
-# Override at runtime with METRICS_PORT env var if needed.
+# Expose the default metrics/health port.
 EXPOSE 3000
 
-# SECURITY: run as the unprivileged built-in 'node' user, never root.
+# SECURITY: run as the unprivileged node user.
 USER node
 
-# Start the keeper bot.
 CMD ["node", "index.js"]