FROM nginx:1.25-alpine

# Install curl for health checks
RUN apk add --no-cache curl

COPY nginx.conf /etc/nginx/nginx.conf

# Add security headers and optimizations
RUN echo 'server_tokens off;' >> /etc/nginx/conf.d/security.conf

EXPOSE 80

# Health check
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
  CMD curl -f http://localhost/ || exit 1