FROM oven/bun:1 AS build WORKDIR /app COPY package.json bun.lock ./ RUN bun install --frozen-lockfile COPY . . RUN bun run build \ && bun run compile \ && mv out/server-* out/server FROM gcr.io/distroless/cc-debian13:nonroot COPY --from=build --chown=nonroot:nonroot /app/out/server /app/server ENV HOST=0.0.0.0 EXPOSE 3000 CMD ["/app/server"]