Update CI to use node 24. Dockerfile now using hardened images

.github/workflows/ci.yml

@@ -7,7 +7,7 @@ jobs:
 
     strategy:
       matrix:
-        node-version: [18.x]
+        node-version: [24.x]
         mongodb-version: ['7.0']
 
     steps:
@@ -51,7 +51,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        node-version: [18.x]
+        node-version: [24.x]
         mongodb-version: ['7.0']
     steps:
       - uses: actions/checkout@v2

.tool-versions

@@ -0,0 +1 @@
+nodejs 24.14.0

Dockerfile

@@ -1,4 +1,4 @@
-FROM node:18 as deps
+FROM dhi.io/node:24-dev AS deps
 
 # Create app directory
 WORKDIR /usr/src/app
@@ -18,22 +18,19 @@ COPY --chown=node:node package*.json .
 # Install only runtime dependencies
 RUN npm install --omit=dev
 
-FROM node:18-slim as runner
+FROM dhi.io/node:24 AS runner
 
 USER node
 WORKDIR /home/node/app
 
-RUN mkdir node_modules
-RUN chown node:node node_modules
-
 COPY --from=deps --chown=node:node /home/node/app/node_modules ./node_modules
 COPY --chown=node:node package*.json .
 COPY --chown=node:node src* ./src
 
 # Start app
 EXPOSE 3000
-ENV PORT 3000
-ENV REDIS_PORT 6379
-ENV DB_PORT 27017
-ENV HOST "0.0.0.0"
-CMD [ "npm", "start" ]
+ENV PORT=3000
+ENV REDIS_PORT=6379
+ENV DB_PORT=27017
+ENV HOST="0.0.0.0"
+CMD [ "node", "./src/server/server.js" ]

docker-compose.yml

@@ -1,5 +1,3 @@
-version: '3'
-
 services:
   fhir:
     depends_on:
@@ -16,18 +14,19 @@ services:
       EXPORT_WORKERS: 2
     ports:
       - '3000:3000'
-    command: npm start
 
   mongo:
-    image: mongo:6.0
+    image: mongo:7.0
     # uncomment the following to have access to the containerized mongo at 27018
     # ports:
     #   - "27018:27017"
     volumes:
       - mongo_data:/data/db
 
   redis:
-    image: redis
-
+    image: dhi.io/redis:8
+    command: ["redis-server", "--protected-mode no"]
+    expose:
+      - '6379'
 volumes:
   mongo_data: