diff --git a/Dockerfile b/Dockerfile
index 9b73032..1ff096d 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -3,13 +3,29 @@
 FROM node:20-bullseye-slim AS base
 ENV PNPM_HOME=/root/.local/share/pnpm
 ENV PATH=$PNPM_HOME:$PATH
-RUN corepack enable
+# Pin pnpm and activate via Corepack to avoid downloads during later steps
+ARG PNPM_VERSION=8.15.9
+RUN corepack enable && corepack prepare pnpm@${PNPM_VERSION} --activate
+
+# Make installs more resilient in poor networks
+ARG NPM_REGISTRY=https://registry.npmjs.org/
+ENV NPM_CONFIG_REGISTRY=${NPM_REGISTRY}
+ENV PNPM_FETCH_TIMEOUT=600000 \
+    PNPM_FETCH_RETRIES=5 \
+    PNPM_NETWORK_CONCURRENCY=8
 
 FROM base AS deps
 WORKDIR /app
 COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
 COPY apps/backend/package.json ./apps/backend/
-RUN pnpm install --filter backend... --frozen-lockfile
+# Use a project-local pnpm store so it can be copied between stages
+RUN pnpm config set store-dir /app/.pnpm-store \
+ && pnpm config set registry ${NPM_CONFIG_REGISTRY}
+
+# Prefetch tarballs to the store, then install offline to avoid flaky networks
+RUN --mount=type=cache,id=pnpm-store,target=/app/.pnpm-store \
+    pnpm fetch --filter backend... \
+ && pnpm install --filter backend... --offline --frozen-lockfile
 
 FROM deps AS build
 COPY apps ./apps
@@ -20,7 +36,10 @@ WORKDIR /app
 RUN apt-get update && apt-get install -y --no-install-recommends curl && rm -rf /var/lib/apt/lists/*
 COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
 COPY apps/backend/package.json ./apps/backend/
-RUN pnpm install --prod --filter backend
+# Bring over the prefetched store and deploy production deps offline
+COPY --from=deps /app/.pnpm-store /app/.pnpm-store
+RUN pnpm config set store-dir /app/.pnpm-store \
+ && pnpm --offline deploy --filter backend /app/apps/backend
 COPY --from=build /app/apps/backend/dist ./apps/backend/dist
 WORKDIR /app/apps/backend
 EXPOSE 4000