FROM eclipse-temurin:21-jre-alpine

WORKDIR /app

COPY target/notesvault-0.0.1-SNAPSHOT.jar app.jar

RUN addgroup -S appgroup && adduser -S appuser -G appgroup
USER appuser

EXPOSE 8080

ENTRYPOINT ["java", "-jar", "app.jar"]