chore: fix

docker-prod/frontend/Dockerfile

@@ -0,0 +1,34 @@
+# =========================================================
+# Stage 1: Build React/Vite
+# =========================================================
+FROM node:22-alpine AS builder
+
+WORKDIR /app
+
+COPY frontend-prep/package.json frontend-prep/package-lock.json* ./
+RUN npm ci --ignore-scripts
+
+COPY frontend-prep/ .
+RUN npm run build
+
+# =========================================================
+# Stage 2: Nginx HTTP (TLS terminé par le WAF)
+# =========================================================
+FROM nginx:alpine AS runtime
+
+COPY docker/frontend/nginx.conf /etc/nginx/conf.d/default.conf
+
+COPY --from=builder /app/dist /usr/share/nginx/html
+
+RUN chown -R nginx:nginx /usr/share/nginx/html && \
+    mkdir -p /var/cache/nginx && \
+    chown -R nginx:nginx /var/cache/nginx && \
+    chown -R nginx:nginx /var/log/nginx && \
+    touch /var/run/nginx.pid && \
+    chown nginx:nginx /var/run/nginx.pid
+
+USER nginx
+
+EXPOSE 80
+
+CMD ["nginx", "-g", "daemon off;"]

docker-prod/frontend/nginx.conf

@@ -0,0 +1,16 @@
+server {
+    listen 80;
+    server_name _;
+
+    root /usr/share/nginx/html;
+    index index.html;
+
+    location / {
+        try_files $uri $uri/ /index.html;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$ {
+        expires 1y;
+        add_header Cache-Control "public, immutable";
+    }
+}