Upload Dockerfile

Dockerfile

@@ -9,42 +9,53 @@ RUN apk add --no-cache \
     harfbuzz \
     ca-certificates \
     ttf-freefont \
+    wqy-zenhei \
     bash \
     curl \
     && rm -rf /var/cache/apk/*
 
 # 设置Puppeteer使用系统Chrome
 ENV PUPPETEER_SKIP_CHROMIUM_DOWNLOAD=true \
-    PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium-browser
+    PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium-browser \
+    CHROME_BIN=/usr/bin/chromium-browser \
+    PUPPETEER_ARGS="--no-sandbox --disable-setuid-sandbox --disable-dev-shm-usage"
 
-# 安装必要的系统依赖
-RUN apk add --no-cache bash curl
+# 创建非root用户
+RUN addgroup -g 1001 -S nodejs
+RUN adduser -S nodejs -u 1001
 
 # 设置工作目录
 WORKDIR /app
 
 # 复制前端所有文件（包括配置文件）
 COPY frontend/ ./frontend/
+RUN chown -R nodejs:nodejs ./frontend
 
 # 复制后端package.json
 COPY backend/package*.json ./backend/
 
 # 安装前端依赖并构建
 WORKDIR /app/frontend
+USER nodejs
 RUN npm install
 RUN npm run build
 
-# 安装后端依赖
+# 切换回root安装后端依赖
+USER root
 WORKDIR /app/backend
 RUN npm install --omit=dev
 
 # 复制后端代码
 WORKDIR /app
 COPY backend/ ./backend/
+RUN chown -R nodejs:nodejs ./backend
 
 # 设置工作目录为后端
 WORKDIR /app/backend
 
+# 切换到nodejs用户
+USER nodejs
+
 # 暴露端口
 EXPOSE 7860