feat(v2): complete v2 reimplementation

frontend/Dockerfile

@@ -1,20 +1,19 @@
-# Stage 1: Build
-FROM node:20-alpine AS builder
+# syntax=docker/dockerfile:1
+FROM node:22.17.1-alpine@sha256:5539840ce9d013fa13e3b9814c9353024be7ac75aca5db6d039504a56c04ea59 AS builder
 
 WORKDIR /app
-
 COPY package*.json ./
-RUN npm install
-
+RUN npm ci
 COPY . .
 RUN npm run build
 
-# Stage 2: Serve
-FROM nginx:alpine
+FROM nginx:1.29.7-alpine@sha256:e7257f1ef28ba17cf7c248cb8ccf6f0c6e0228ab9c315c152f9c203cd34cf6d1
 
 COPY --from=builder /app/dist /usr/share/nginx/html
-COPY nginx.conf /etc/nginx/conf.d/default.conf
-
-EXPOSE 80
+COPY nginx.conf /etc/nginx/nginx.conf
+RUN chown -R 10001:0 /usr/share/nginx/html /var/cache/nginx /var/run /etc/nginx && \
+    chmod -R g=u /usr/share/nginx/html /var/cache/nginx /var/run /etc/nginx
 
+USER 10001:0
+EXPOSE 8080
 CMD ["nginx", "-g", "daemon off;"]