FROM node:22-slim

COPY bokca.pem /usr/local/share/ca-certificates/bokca.crt
ENV NODE_EXTRA_CA_CERTS=/usr/local/share/ca-certificates/bokca.crt
ENV HTTP_PROXY=http://10.16.57.123:31443 \
    HTTPS_PROXY=http://10.16.57.123:31443 \
    NO_PROXY=localhost,127.0.0.1
RUN npm config set cafile /usr/local/share/ca-certificates/bokca.crt

WORKDIR /app
COPY package*.json ./
RUN npm ci || npm install
COPY . .

EXPOSE 3000
CMD ["npm", "start"]