FROM oven/bun:1.3.13 AS build WORKDIR /app COPY package.json bun.lock ./ RUN bun install --frozen-lockfile COPY . . RUN bun run build \ && bun run compile \ && mv out/server-* out/server FROM gcr.io/distroless/cc-debian13:nonroot WORKDIR /app COPY --from=build --chown=nonroot:nonroot /app/out/server ./server COPY --from=build --chown=nonroot:nonroot /app/drizzle ./drizzle ENV HOST=0.0.0.0 EXPOSE 3000 CMD ["./server"]