Add Caddyfile and update dockerfile.

frontend/Caddyfile

@@ -0,0 +1,48 @@
+{
+	auto_https off
+	admin 0.0.0.0:3003
+	servers {
+		metrics
+	}
+}
+:3000 {
+	log {
+		output stdout
+		format console {
+			time_format iso8601
+			level_format color
+		}
+		level {$LOG_LEVEL}
+	}
+	root * /srv
+	encode zstd gzip
+	file_server
+	@spa_router {
+		not path /api*
+		file {
+			try_files {path} /index.html
+		}
+	}
+	rewrite @spa_router {http.matchers.file.relative}
+	# Proxy requests to API service
+	reverse_proxy /api* {$BACKEND_URL} {
+		header_up Host {http.reverse_proxy.upstream.hostport}
+		header_up X-Real-IP {remote_host}
+		header_up X-Forwarded-For {remote_host}
+	}
+	header {
+		X-Frame-Options "SAMEORIGIN"
+		X-XSS-Protection "1;mode=block"
+		Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate"
+		X-Content-Type-Options "nosniff"
+		Strict-Transport-Security "max-age=31536000"
+		Content-Security-Policy "default-src 'self' https://spt.apps.gov.bc.ca data:; script-src 'self' 'unsafe-eval' https://www2.gov.bc.ca ;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.fontawesome.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https://fonts.googleapis.com http://www.w3.org https://*.gov.bc.ca"
+		Referrer-Policy "same-origin"
+		Feature-Policy "fullscreen 'self'; camera 'none'; microphone 'none'"
+	}
+}
+:3001 {
+	handle /health {
+		respond "OK"
+	}
+}

frontend/Dockerfile

@@ -16,11 +16,10 @@ RUN npm run build
 
 FROM caddy:2
 
-# RUN chmod +x /usr/bin/caddy
-
-COPY --from=build /app/dist /usr/share/caddy
-
-# CMD run sh -c "npm run serve"
+# Copy static files, verify Caddyfile formatting
+COPY --from=build /app/dist /srv
+COPY Caddyfile /etc/caddy/Caddyfile
+RUN caddy fmt /etc/caddy/Caddyfile
 
 # FROM node:14.21.3