Add dockerfile build and push workflow

.dockerignore

@@ -0,0 +1,2 @@
+.git
+node_modules

.github/workflows/build-and-push.yml

@@ -0,0 +1,31 @@
+name: Build & Publish a Docker image
+
+on:
+  push:
+    branches: ["master"]
+
+jobs:
+  publish:
+
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Log in to the Container registry
+        uses: docker/[email protected]
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and push Docker image
+        uses: docker/[email protected]
+        with:
+          push: true
+          tags: ghcr.io/trusted/url-to-pdf-api:c-${{ github.sha }}

Dockerfile

@@ -13,14 +13,16 @@ RUN apt update -y \
 RUN groupadd --gid 1000 node \
   && useradd --uid 1000 --gid node --shell /bin/bash --create-home node
 
-USER node
-
 ENV HOME=/home/node
 ARG APP_HOME=/home/node/srv
 WORKDIR $APP_HOME
 
-COPY . ./
-RUN npm install --only=production
+RUN chown -R node:node $APP_HOME
+
+USER node
+
+COPY --chown=1000:1000 . ./
+RUN npm install --omit=dev
 
 EXPOSE $PORT
 CMD [ "node", "." ]