diff --git a/docker-compose.yml b/docker-compose.yml
index e54a542..b813f3b 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -34,10 +34,6 @@ services:
     restart: unless-stopped
     env_file:
       - ./frontend/.env.local
-    volumes:
-      - ./frontend:/app
-      - /app/node_modules
-      - /app/.next
     ports:
       - "3000:3000"
     depends_on:
diff --git a/frontend/Dockerfile b/frontend/Dockerfile
index 0dbf9aa..2992510 100644
--- a/frontend/Dockerfile
+++ b/frontend/Dockerfile
@@ -2,10 +2,17 @@ FROM node:22-bookworm-slim
 
 WORKDIR /app
 
+# registry.npmjs.org resolves to Cloudflare's IPv6-only records here, and
+# Docker's default bridge network has flaky IPv6 egress — Node's Happy
+# Eyeballs then hangs on IPv6 before timing out instead of falling back to
+# IPv4 quickly, causing intermittent ETIMEDOUT mid-install.
+ENV NODE_OPTIONS=--dns-result-order=ipv4first
+
 COPY package.json package-lock.json* ./
 RUN npm install
 
 COPY . .
+RUN npm run build
 
-CMD ["npm", "run", "dev", "--", "--hostname", "0.0.0.0"]
+CMD ["npm", "start", "--", "--hostname", "0.0.0.0"]
 
diff --git a/frontend/package.json b/frontend/package.json
index 3ffe339..2e9d22e 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -10,7 +10,7 @@
   },
   "dependencies": {
     "lucide-react": "^0.469.0",
-    "next": "15.1.6",
+    "next": "15.1.11",
     "react": "19.0.0",
     "react-dom": "19.0.0"
   },
@@ -19,7 +19,7 @@
     "@types/react": "^19.0.2",
     "@types/react-dom": "^19.0.2",
     "eslint": "^9.17.0",
-    "eslint-config-next": "15.1.6",
+    "eslint-config-next": "15.1.11",
     "typescript": "^5.7.2"
   }
 }