diff --git a/.dockerignore b/.dockerignore
new file mode 100644
index 0000000..a3e99c6
--- /dev/null
+++ b/.dockerignore
@@ -0,0 +1,6 @@
+node_modules
+npm-debug.log*
+.git
+.gitignore
+*.pdf
+README.md
diff --git a/Dockerfile b/Dockerfile
index 9800329..2c90013 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,14 +2,17 @@ FROM node:20-alpine
 
 WORKDIR /app
 
-COPY package.json package-lock.json* ./
-RUN npm install --omit=dev
+COPY package.json package-lock.json ./
+RUN npm ci --omit=dev && node -e "require('express')"
 
 COPY server.js ./
 COPY src ./src
 COPY public ./public
 COPY locales ./locales
 
+RUN chown -R node:node /app
+USER node
+
 ENV PORT=3000
 EXPOSE 3000