FROM node:22-bookworm-slim

RUN sed -i "s/Components: main/Components: main contrib/" /etc/apt/sources.list.d/debian.sources \
 && apt-get update \
 && apt-get install -y --no-install-recommends \
      ca-certificates chromium chromium-sandbox \
 && rm -rf /var/lib/apt/lists/*

WORKDIR /app
COPY package.json .
RUN npm install --omit=dev
COPY app.mjs ./

RUN chown -R node:node /app
USER node
EXPOSE 3000
CMD ["node", "app.mjs"]
