Hono Dockerfile generator

Good practice: Multi-stage build (5 stages)

Compilers, dev dependencies and source files stay in the build stages. Only the runtime artefacts are copied into the final image.

Good practice: Runs as node, not root

A container escape from a root process is a host root process. Dropping privileges is the cheapest hardening step there is.

Good practice: .dockerignore keeps secrets out of the build context

`.git`, `.env` and local dependency folders never reach the daemon, so they cannot end up in a layer or in `docker history`.

Good practice: Dependency cache persists across builds

BuildKit cache mounts keep the package manager store outside the image. Rebuilds after a lockfile change reuse everything already downloaded, and the cache adds nothing to the final size.

Good practice: Healthcheck defined

Docker, Compose and Easypanel can tell the difference between a running process and a working app, and restart it when it wedges.

Note: Requires BuildKit

BuildKit is the default builder in Docker 23 and later. On anything older, export `DOCKER_BUILDKIT=1` before building.

Note: Alpine uses musl, not glibc

Smallest possible image, but packages with prebuilt native binaries — sharp, canvas, bcrypt, better-sqlite3, Prisma engines — may have to compile from source or fail outright. Switch to Debian slim if a native module misbehaves.

Note: Estimated image size: ~60–120 MB

A rough band for the final stage, before your own dependencies. Run `docker images` after a build for the real number.