diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 0000000..250006e
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,45 @@
+# Multi-stage Docker build for size optimization
+FROM node:alpine AS builder
+
+# Set the working directory
+WORKDIR /app
+
+# Copy package files first (for better layer caching)
+COPY package*.json ./
+
+# Install dependencies (production only)
+RUN npm ci --only=production
+
+# Production stage
+FROM node:alpine AS production
+
+# metadata
+LABEL maintainer="Marc Kupietz <kupietz@ids-mannheim.de>"
+
+# Install minimal runtime dependencies
+RUN apk add --no-cache --update \
+    shadow \
+    && rm -rf /var/cache/apk/*
+
+# Add non-root user
+RUN groupadd -r appuser && useradd -r -g appuser appuser
+
+# Set the working directory
+WORKDIR /app
+
+# Copy node_modules from builder
+COPY --from=builder --chown=appuser:appuser /app/node_modules /app/node_modules
+
+# Copy application source
+COPY --chown=appuser:appuser package.json /app/
+COPY --chown=appuser:appuser src /app/src
+
+# Copy entry point
+COPY --chown=appuser:appuser docker-entrypoint.sh /docker-entrypoint.sh
+RUN chmod +x /docker-entrypoint.sh
+
+# Switch to non-root user
+USER appuser
+
+# Define the entry point
+ENTRYPOINT ["/docker-entrypoint.sh"]