diff --git a/docker-compose.yml b/docker-compose.yml
index f10a84f..5d97a13 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -2,7 +2,9 @@ version: '3.8'
 
 services:
   web:
-    image: nginx:alpine
+    build:
+      context: .
+      dockerfile: frontend/Dockerfile
     restart: unless-stopped
     # Architecture §2.2: this is the only service exposed to the host. The
     # default.conf file is mounted as a template; scripts/nginx-entrypoint.sh
diff --git a/frontend/Dockerfile b/frontend/Dockerfile
index c906eec..1527c9e 100644
--- a/frontend/Dockerfile
+++ b/frontend/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:22-alpine AS frontend-build
+FROM node:24.18.1-slim AS frontend-build
 WORKDIR /app
 RUN corepack enable && corepack prepare pnpm@10.15.1 --activate
 COPY frontend/package.json frontend/pnpm-lock.yaml ./