feat: modernize and harden Lettia bot

2026-08-13 23:58:24 +09:00
parent 974677b463
commit 44dada3e23
16 changed files with 873 additions and 393 deletions
@@ -1,13 +1,12 @@
-FROM node:22-alpine
+FROM node:24-alpine@sha256:d32cdf619f63fe0471182d08996dd516c6275bb5fd31ae06e55a570bd9e1ad43

 WORKDIR /app

-COPY package.json /app
-COPY package-lock.json /app
-COPY .env /app
-COPY tsconfig.json /app
-COPY src /app/src
+COPY --chown=node:node package.json package-lock.json ./
+RUN npm ci --omit=dev && npm cache clean --force

-RUN npm i
+COPY --chown=node:node src ./src

-CMD ["npm", "run", "start"]
+USER node
+
+CMD ["npm", "run", "start"]