diff --git a/Dockerfile b/Dockerfile
index 43594146..8e2eed71 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -32,6 +32,7 @@ WORKDIR /app
 # Copy apps
 COPY --from=builder /app/apps/server/dist /app/apps/server/dist
 COPY --from=builder /app/apps/client/dist /app/apps/client/dist
+COPY --from=builder /app/apps/client/package.json /app/apps/client/package.json
 COPY --from=builder /app/apps/server/package.json /app/apps/server/package.json
 
 # Copy packages
@@ -51,7 +52,8 @@ RUN chown -R node:node /app
 
 USER node
 
-RUN pnpm install --frozen-lockfile --prod && rm -rf /home/node/.cache/pnpm
+# client package.json is only copied for the lockfile check; its deps are bundled in dist
+RUN pnpm install --frozen-lockfile --prod --filter '!./apps/client' && rm -rf /home/node/.cache/pnpm
 
 RUN mkdir -p /app/data/storage