Writing a hardened Dockerfile

Objective

Turn a Dockerfile "that works" into a safe Dockerfile: a small, reproducible image, without secrets, that does not run as root and that contains only what the application needs in production. You will also be able to have it checked automatically by hadolint and run the container read-only.