refactor: Enhance all Dockerfiles with security hardening, optimization, and production best practices

- Add maintainer and description labels to all build and runtime stages
- Change builder WORKDIR from /app to /build for clarity
- Install build dependencies with --no-cache/--no-install-recommends flags
- Add build optimizations: -ldflags="-w -s -extldflags '-static'" and -trimpath for Go, strip for Rust
- Implement dependency caching strategy for Rust builds (dummy app pattern)
- Pin Alpine base

deployments/docker/web-dashboard.Dockerfile

@@ -1,30 +1,71 @@
+# Build stage
 FROM node:22-alpine AS builder
-    
-WORKDIR /app
+
+LABEL maintainer="nutcas3 <[email protected]>" \
+      description="Web Dashboard for Telecom Platform"
+
+WORKDIR /build
 
 RUN corepack enable
 
+# Copy dependency files for better layer caching
 COPY package.json pnpm-workspace.yaml pnpm-lock.yaml ./
-COPY apps/web-dashboard ./apps/web-dashboard
 
+# Install dependencies
 RUN pnpm install --frozen-lockfile
 
+# Copy source code
+COPY apps/web-dashboard ./apps/web-dashboard
+
+# Build with optimizations
 RUN pnpm --filter web-dashboard build
 
+# Runtime stage
 FROM node:22-alpine
 
-WORKDIR /app
+LABEL maintainer="nutcas3 <[email protected]>" \
+      description="Web Dashboard for Telecom Platform" \
+      version="1.0.0"
 
 RUN corepack enable
 
-COPY --from=builder /app/apps/web-dashboard/.next ./apps/web-dashboard/.next
-COPY --from=builder /app/apps/web-dashboard/public ./apps/web-dashboard/public
-COPY --from=builder /app/apps/web-dashboard/package.json ./apps/web-dashboard/
-COPY --from=builder /app/apps/web-dashboard/next.config.js ./apps/web-dashboard/
-COPY --from=builder /app/node_modules ./node_modules
+# Install runtime dependencies
+RUN apk add --no-cache ca-certificates tzdata
+
+# Create non-root user
+RUN addgroup -g 1000 appuser && \
+    adduser -D -u 1000 -G appuser appuser
+
+WORKDIR /app
+
+# Copy built application from builder
+COPY --from=builder /build/apps/web-dashboard/.next ./apps/web-dashboard/.next
+COPY --from=builder /build/apps/web-dashboard/public ./apps/web-dashboard/public
+COPY --from=builder /build/apps/web-dashboard/package.json ./apps/web-dashboard/
+COPY --from=builder /build/apps/web-dashboard/next.config.js ./apps/web-dashboard/
+
+# Copy production dependencies only
+COPY --from=builder /build/node_modules ./node_modules
 
 WORKDIR /app/apps/web-dashboard
 
+# Change ownership
+RUN chown -R appuser:appuser /app
+
+# Switch to non-root user
+USER appuser
+
+# Expose port
 EXPOSE 3000
 
+# Health check
+HEALTHCHECK --interval=30s --timeout=10s --start-period=30s --retries=3 \
+    CMD wget --no-verbose --tries=1 --spider http://localhost:3000 || exit 1
+
+# Set environment variables
+ENV NODE_ENV=production
+
+# Signal handling
+STOPSIGNAL SIGTERM
+
 CMD ["pnpm", "start"]