Dockerfile

# --- Build stage ---
FROM golang:1.24.1-bullseye AS builder
WORKDIR /app
COPY . .
RUN go mod download
RUN CGO_ENABLED=0 GOOS=linux go build -o render-server main.go

# --- Runtime stage ---
FROM debian:bullseye-slim

# Install Chromium and minimal runtime deps
RUN apt-get update && apt-get install -y \
  chromium xvfb xauth libasound2 libatk-bridge2.0-0 libatk1.0-0 libcups2 \
  libdbus-1-3 libgdk-pixbuf2.0-0 libnspr4 libnss3 libx11-xcb1 libxcomposite1 \
  libxdamage1 libxrandr2 libgbm1 libgtk-3-0 ca-certificates xdg-utils \
  --no-install-recommends && \
  apt-get clean && rm -rf /var/lib/apt/lists/*

# Create non-root user and working directory
RUN groupadd -r appuser && useradd -r -g appuser appuser
RUN mkdir -p /home/appuser && chown -R appuser:appuser /home/appuser

WORKDIR /app

# Copy Go binary from builder stage
COPY --from=builder /app/render-server .

# Set environment variables
ENV DISPLAY=:99
ENV CHROMIUM_PATH=/usr/bin/chromium
ENV HOME=/home/appuser

# Expose app port
EXPOSE 8080

# Startup script for Xvfb + server
RUN echo '#!/bin/bash\n\
  echo "Starting Xvfb..."\n\
  Xvfb :99 -screen 0 1920x1080x24 &\n\
  sleep 2\n\
  echo "Starting render server..."\n\
  exec /app/render-server' > /app/start.sh && chmod +x /app/start.sh

USER appuser

# Entrypoint
CMD ["/bin/bash", "/app/start.sh"]