# SteamTradeX Reporter. No npm packages, so the image is Node and one file.
#
#   docker build -t stx-reporter .
#   docker run -d --name stx-reporter --restart unless-stopped --read-only \
#     -v "$PWD/reporter.env:/app/reporter.env:ro" stx-reporter
#
# It needs no open port and writes nothing to disk, so --read-only works.
FROM node:22-alpine

WORKDIR /app
COPY stx-reporter.mjs ./

# The node image's own unprivileged user. The reporter only reads its
# settings file and makes outgoing HTTPS requests.
USER node

ENV NODE_ENV=production
CMD ["node", "stx-reporter.mjs"]