Master Docker.
Orchestrate with Kubernetes.

# Stage 1: Build & Dependency Resolution
FROM node:20-alpine AS builder
WORKDIR /app
COPY package*.json ./
RUN npm ci --only=production
COPY . .
RUN npm run build

# Stage 2: Hardened Minimal Distroless Runner
FROM gcr.io/distroless/nodejs20-debian12
WORKDIR /app
COPY --from=builder /app/dist ./dist
USER nonroot:nonroot
EXPOSE 3000
CMD ["dist/server.js"]

version: '3.8'
services:
web:
  build: .
  ports:
    - "3000:3000"
  environment:
    - NODE_ENV=production
    - DB_HOST=db
  depends_on:
    db:
      condition: service_healthy
db:
  image: postgres:16-alpine
  environment:
    POSTGRES_DB: app
    POSTGRES_USER: user
    POSTGRES_PASSWORD_FILE: /run/secrets/db_password
  volumes:
    - pgdata:/var/lib/postgresql/data
  healthcheck:
    test: ["CMD-SHELL", "pg_isready -U user -d app"]
    interval: 5s
    timeout: 5s
    retries: 5
volumes:
pgdata:

apiVersion: apps/v1
kind: Deployment
metadata:
name: web-application
labels:
  app.kubernetes.io/name: web
spec:
replicas: 3
selector:
  matchLabels:
    app: web
template:
  metadata:
    labels:
      app: web
  spec:
    containers:
    - name: web
      image: registry.example.com/app:v2.4.0
      ports:
      - containerPort: 3000
      resources:
        requests:
          cpu: 100m
          memory: 128Mi
        limits:
          cpu: 500m
          memory: 512Mi
      readinessProbe:
        httpGet:
          path: /healthz
          port: 3000
        initialDelaySeconds: 5
        periodSeconds: 10