Fixing non-src stuff

Author: Aayush-Agnihotri

.env.template

@@ -1,11 +1,14 @@
 NODE_ENV="dev"
 
+# Slack API credentials
 SLACK_BOT_TOKEN=
 SLACK_SIGNING_SECRET=
 SLACK_APP_TOKEN=
 
+# MongoDB connection URI
 DATABASE_URI=
 
+# Google Sheets configuration
 FORM_TRACKER_ID=
 TRACKER_SHEET_NAME=
 FORM_INFO_SHEET_NAME=

.github/workflows/deploy.yml

@@ -28,7 +28,6 @@ jobs:
       - name: Build
         run: |-
           docker build --tag "cornellappdev/big-red-bot:${{ steps.vars.outputs.sha_short }}" .
-      # Push the Docker image to Google Container Registry
       - name: Publish
         run: |-
           docker push "cornellappdev/big-red-bot:${{ steps.vars.outputs.sha_short }}"

Dockerfile

@@ -1,12 +1,31 @@
-FROM node:24.13.1
+# Build stage
+FROM node:24.13.1-alpine AS builder
 
-RUN mkdir /usr/app
 WORKDIR /usr/app
 
-COPY package.json .
-COPY package-lock.json .
+COPY package.json package-lock.json ./
+RUN npm ci --only=production && npm cache clean --force
+
+# Production stage
+FROM node:24.13.1-alpine
+
+WORKDIR /usr/app
+
+# Copy dependencies from builder
+COPY --from=builder /usr/app/node_modules ./node_modules
+
+# Copy application files
+COPY package.json package-lock.json ./
+COPY tsconfig.json ./
+COPY src ./src
+
+# Run as non-root user
+RUN addgroup -g 1001 -S nodejs && \
+  adduser -S nodejs -u 1001 && \
+  chown -R nodejs:nodejs /usr/app
+
+USER nodejs
+
+EXPOSE 3000
 
-RUN npm ci
-COPY . .
-EXPOSE 3000 8000
 CMD ["npm", "start"]