chore(web-player): tighten the container image

There was no .dockerignore, so node_modules and build/ were copied into the build context on every build. Add one, install from the lockfile with npm ci, prune the dev dependencies out of the runtime layer and run as the node user.
2026-07-20 15:14:04 +02:00
parent b4385d9028
commit cea0dbffa4
2 changed files with 16 additions and 3 deletions
@@ -0,0 +1,12 @@
+node_modules
+build
+.svelte-kit
+.env
+.env.*
+!.env.example
+.git
+.github
+.claude
+.vscode
+docs
+*.md