baseline: pre-deepseek-harness state

Dockerfile

@@ -0,0 +1,34 @@
+# ===== Imgur Clone - Single Container Deployment =====
+FROM node:20-alpine
+
+WORKDIR /app
+
+# Fix Alpine OS CVEs: upgrade all packages first (libcrypto3, libssl3, etc.)
+RUN apk update && apk upgrade --no-cache
+
+# Install libvips build deps for sharp (removed after npm ci for smaller image)
+RUN apk add --no-cache build-base python3
+
+# Copy package files first for better layer caching
+COPY package*.json ./
+RUN npm ci --omit=dev && \
+    apk del build-base python3 && \
+    rm -rf /usr/local/lib/node_modules/npm /usr/local/lib/node_modules/corepack
+
+# Copy application code
+COPY server.js ./
+COPY seed/ ./seed/
+COPY public/ ./public/
+
+# Create uploads directory
+RUN mkdir -p /app/public/uploads
+
+# Expose port
+EXPOSE 3000
+
+# Health check
+HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
+  CMD wget --no-verbose --tries=1 --spider http://localhost:3000/api/health || exit 1
+
+# Start directly with node (npm stripped to reduce attack surface)
+CMD ["node", "server.js"]