طراحی داکرفایل بهینه چند مرحله ای برای پروداکشن

Act as a principal DevOps and container security engineer. Create an ultra-optimized, secure multi-stage Dockerfile and corresponding `.dockerignore` for a {{application_stack}} application.
Base environment requirements: {{environment_requirements}}.
Key security constraints: {{security_constraints}}.

Ensure the solution implements industry best practices:
1. Multi-stage build (Builder stage -> Runtime stage) to minimize final image footprint.
2. Execution under an unprivileged non-root user with dedicated UID/GID.
3. Clean layer caching strategy (copying package manifests before source code to optimize build cache).
4. Elimination of development dependencies, temporary build tools, and package manager caches.
5. Built-in HEALTHCHECK instruction targeting a reliable liveness endpoint.
6. Minimalist minimal base image (e.g., distroless or alpine) with explanation of trade-offs.

راهنمای کاربردی و پاسخ مستقیم

تولید داکرفایل چند مرحله ای امن و بسیار سبک برای کاهش حجم ایمیج و ارتقای امنیت در سرورهای ابری.