diff --git a/Dockerfile b/Dockerfile
index d5a5220..859422b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -4,13 +4,11 @@
 FROM node:22-slim AS build
 WORKDIR /app
 
-# The lockfile is generated by npm 11; node:22 ships npm 10, which rejects it
-# ("Missing: @emnapi/core ..."). Match the generator before installing.
-RUN npm install -g npm@11
-
-# Install deps against the lockfile for reproducible builds.
+# Use npm install (not npm ci): Astro 7's wasm32 optional deps (@emnapi/*)
+# make npm ci's strict lock-sync check fail across npm/node versions. install
+# reconciles the lockfile and builds reliably.
 COPY package.json package-lock.json* ./
-RUN npm ci
+RUN npm install --no-audit --no-fund
 
 COPY . .
 # PUBLIC_* env vars are inlined at build time. In Coolify, set them as