diff --git a/Dockerfile b/Dockerfile
index c99c842..ae230bc 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,11 +1,15 @@
 FROM node:lts-alpine AS build
 WORKDIR /app
 COPY . .
-RUN npm i
+RUN npm ci
 RUN npm run build
 
 FROM node:lts-alpine AS runtime
 WORKDIR /app
-COPY --from=build /app/dist /app
-CMD ["node", "./index.js"]
+ENV NODE_ENV production
+USER node
+COPY --chown=node:node package*.json ./
+RUN npm ci --production
+COPY --from=builder --chown=node:node /app/dist ./dist
 EXPOSE 3000
+CMD ["node", "./dist/index.js"]