FROM node:22-alpine
WORKDIR /app
COPY scanner.mjs audit-journal.mjs managed-gateway.mjs provider-protocols.mjs governance.mjs governance-console.html governance-console.mjs governance-console.css enterprise-directory.mjs enterprise-oidc.mjs content-inspection.mjs extract-content.py ./
RUN mkdir /audit && chown 10001:10001 /audit
USER 10001:10001
ENV NODE_ENV=production
EXPOSE 8443
CMD ["node", "managed-gateway.mjs"]