backup: pre-hardening baseline

docker/Dockerfile

@@ -0,0 +1,20 @@
+FROM golang:1.23-alpine AS backend
+WORKDIR /app/backend
+COPY backend/go.mod backend/go.sum ./
+RUN go mod download
+COPY backend/ ./
+RUN go build -o /traefik-gui ./cmd/traefik-gui
+
+FROM node:20-alpine AS frontend
+WORKDIR /app/frontend
+COPY frontend/package.json frontend/package-lock.json* ./
+RUN npm ci || npm install
+COPY frontend/ ./
+RUN npm run build
+
+FROM alpine:3.19
+RUN apk add --no-cache ca-certificates
+COPY --from=backend /traefik-gui /usr/local/bin/traefik-gui
+COPY --from=frontend /app/frontend/dist /app/frontend/dist
+EXPOSE 8080
+ENTRYPOINT ["traefik-gui"]