hc-pdf-server/Dockerfile at main · janu-software/hc-pdf-server · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
# https://github.com/uyamazak/hc-pdf-server
FROM node:22-slim AS package_install
LABEL maintainer="uyamazak<yu.yamazaki85@gmail.com>"
COPY package.json pnpm-lock.yaml /app/
WORKDIR /app
# Tell Puppeteer to skip installing Chrome. We'll be using the installed package.
ENV PUPPETEER_SKIP_CHROMIUM_DOWNLOAD=true \
  PUPPETEER_EXECUTABLE_PATH=/usr/bin/google-chrome-stable
RUN ["corepack", "enable"]
RUN ["pnpm", "install"]


FROM node:22-slim AS runtime
# Fastify in docker needs 0.0.0.0
# https://github.com/fastify/fastify/issues/935
ENV HCPDF_SERVER_ADDRESS=0.0.0.0

# Install fonts from debian packages https://packages.debian.org/stable/fonts/
ARG ADDITONAL_FONTS=""

RUN ["corepack", "enable"]

# https://github.com/puppeteer/puppeteer/blob/main/docs/troubleshooting.md#running-puppeteer-in-docker
RUN apt-get update \
 && apt-get install -y --no-install-recommends wget gnupg ca-certificates
RUN mkdir -p /usr/share/keyrings \
 && wget -qO- https://dl-ssl.google.com/linux/linux_signing_key.pub \
    | gpg --dearmor -o /usr/share/keyrings/google-linux-signing-key.gpg \
 && echo "deb [arch=amd64 signed-by=/usr/share/keyrings/google-linux-signing-key.gpg] http://dl.google.com/linux/chrome/deb/ stable main" \
    > /etc/apt/sources.list.d/google.list
RUN apt-get update
RUN apt-get install --no-install-recommends -y \
    google-chrome-stable \
    ${ADDITONAL_FONTS} \
    fonts-freefont-ttf \
    libxss1 \
    libproxy1v5 \
    glib-networking \
    libnss3 \
  && rm -rf /var/lib/apt/lists/*

# Install fonts from files
COPY fonts/* /usr/share/fonts/
RUN fc-cache -fv

# Tell Puppeteer to skip installing Chrome. We'll be using the installed package.
ENV PUPPETEER_SKIP_CHROMIUM_DOWNLOAD=true \
  PUPPETEER_EXECUTABLE_PATH=/usr/bin/google-chrome-stable

EXPOSE 8080

# Install puppeteer so it's available in the container.
RUN groupadd -r pptruser && useradd -r -g pptruser -G audio,video pptruser \
  && mkdir -p /home/pptruser/Downloads \
  && mkdir -p /app \
  && chown -R pptruser:pptruser /home/pptruser \
  && chown -R pptruser:pptruser /app

WORKDIR /app
COPY --chown=pptruser:pptruser --from=package_install /app/node_modules /app/node_modules
COPY --chown=pptruser:pptruser src/ /app/src
COPY --chown=pptruser:pptruser test/ /app/test
COPY --chown=pptruser:pptruser package.json \
  tsconfig.json \
  tsconfig.build.json \
  tsconfig.eslint.json \
  .prettierrc.js \
  /app/

RUN pnpm build

# Run everything after as non-privileged user.
USER pptruser

CMD ["pnpm", "run", "start"]