chore(web-player): tighten the container image

There was no .dockerignore, so node_modules and build/ were copied into the build context on every build. Add one, install from the lockfile with npm ci, prune the dev dependencies out of the runtime layer and run as the node user.
2026-07-20 15:14:04 +02:00
parent d683e22cb6
commit fa12fb795d
2 changed files with 16 additions and 3 deletions
@@ -0,0 +1,12 @@
+node_modules
+build
+.svelte-kit
+.env
+.env.*
+!.env.example
+.git
+.github
+.claude
+.vscode
+docs
+*.md