diff --git a/Dockerfile.backend b/Dockerfile.backend
index e7f097f..e60c9f5 100644
--- a/Dockerfile.backend
+++ b/Dockerfile.backend
@@ -9,19 +9,25 @@ RUN npm install -g corepack@latest && corepack enable
 
 WORKDIR /app
 
+# Copy all package manifests so pnpm can resolve the workspace lockfile,
+# but use --ignore-scripts to skip buttplug's Rust/WASM build entirely.
 COPY pnpm-workspace.yaml package.json pnpm-lock.yaml ./
 COPY packages/backend/package.json ./packages/backend/package.json
+COPY packages/frontend/package.json ./packages/frontend/package.json
+COPY packages/buttplug/package.json ./packages/buttplug/package.json
 
-RUN pnpm install --frozen-lockfile --filter @sexy.pivoine.art/backend
+RUN pnpm install --frozen-lockfile --filter @sexy.pivoine.art/backend --ignore-scripts
 
-# Rebuild argon2 native bindings (pnpm v10 build approval bypassed explicitly)
+# Only rebuild the native argon2 binding — not buttplug or anything else
 RUN pnpm rebuild argon2
 
 COPY packages/backend ./packages/backend
 
 RUN pnpm --filter @sexy.pivoine.art/backend build
 
-RUN pnpm install -rP --filter @sexy.pivoine.art/backend
+RUN pnpm install --frozen-lockfile --filter @sexy.pivoine.art/backend --prod --ignore-scripts
+
+RUN pnpm rebuild argon2
 
 # ============================================================================
 # Runner stage