Build Flood v4.7.0 in client-only mode with manual release selection

Dockerfile.client

@@ -1,14 +1,5 @@
-# WARNING:
-#
-# For development and debugging only. Use Dockerfile.release for production.
-#
-# This image bundles rTorrent for easier debugging. It is not started by default.
-# Use --rtorrent argument if you wish to start the bundled rTorrent.
-# For production, use rtorrent-flood instead.
-#
-# This Dockerfile uses contents of current folder which might contain
-# secrets, uncommitted changes or other sensitive information. DO NOT
-# publish the result image unless it was composed in a clean environment.
+# Flood UI only: connects to an external torrent service. No bundled rTorrent.
+# Build from a clean upstream release checkout using the Gitea workflow.
 
 ARG BUILDPLATFORM=amd64
 ARG NODE_IMAGE=docker.io/node:24-alpine3.24
@@ -20,13 +11,12 @@ WORKDIR /usr/src/app/
 # Copy project files
 COPY . ./
 
-RUN npm i -g corepack && corepack enable && corepack install
+# Flood v4.7.0 uses package-lock.json, not pnpm.
+RUN npm ci --legacy-peer-deps --omit=optional
 
-# Fetch dependencies from npm
-RUN pnpm install --frozen-lockfile
-
-# Build assets
-RUN npm run build
+# The v4.7 Webpack toolchain needs legacy hashing with modern Node/OpenSSL.
+# This option applies only to asset compilation, not the running server.
+RUN NODE_OPTIONS=--openssl-legacy-provider npm run build-assets
 
 # Now get the clean Node.js image
 FROM ${NODE_IMAGE} as flood