nestjs multistage non root dockerfile

Dockerfile

# =========== Build ===========
FROM node:16.14.2-buster As development
WORKDIR /usr/src/app
RUN chown -R node:node /usr/src/app
USER node:node
COPY --chown=node:node package*.json ./
RUN npm ci
COPY --chown=node:node . .
RUN npm run build

# =========== Run ===========
# TODO: check if the alpine is not too light regarding performance
FROM node:16-alpine As production
ARG NODE_ENV=production
ENV NODE_ENV=${NODE_ENV}
WORKDIR /usr/src/app
RUN chown -R node:node /usr/src/app
USER node:node
COPY --chown=node:node package*.json ./
RUN npm ci --only=production
COPY --chown=node:node --from=development /usr/src/app/dist ./dist
EXPOSE 3000
CMD ["node", "dist/main"]