diff --git a/.dockerignore b/.dockerignore
new file mode 100644
index 0000000..18aaade
--- /dev/null
+++ b/.dockerignore
@@ -0,0 +1,10 @@
+/**
+!/module
+!/plugins
+!/public
+!/static
+!/util
+!/app.js
+!/server.js
+!/package.json
+!/package-lock.json
diff --git a/Dockerfile b/Dockerfile
index 0c68482..cbc1d55 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,11 +1,16 @@
 FROM node:lts-alpine
 
-WORKDIR /app
-COPY . /app
+RUN apk add --no-cache tini
 
-RUN npm config set registry "https://registry.npmmirror.com/" \
-    && npm install -g npm husky \
-    && npm install --production
+ENV NODE_ENV production
+USER node
+
+WORKDIR /app
+
+COPY --chown=node:node . ./
+
+RUN npm i --omit=dev --ignore-scripts
 
 EXPOSE 3000
-CMD ["node", "app.js"]
+
+CMD [ "/sbin/tini", "--", "node", "app.js" ]