# 浏览器桌面镜像(原站视图桌面模式,docs/design/webtop-remote-browser.md、docs/runbook/browser.md §8):
# linuxserver baseimage-selkies(Webtop 4.0 的底座:pixelflux + labwc Wayland 桌面 + Selkies Web 客户端)
# + camofox-browser 1.17.0 以有头模式跑在同一个 Wayland 会话里 → 桌面上看到的就是 Agent 驱动的那个 Firefox。
#
# camofox 部分不重新下载:直接从旧镜像 camofox-browser:1.17.0(docker/camofox/Dockerfile 构建)复制
# node、/app 与 Camoufox 浏览器包,两个镜像的 camofox 完全一致,可随时用 CAMOFOX_IMAGE 切回旧镜像。
# 手工构建:
#   docker build -t camofox-browser:1.17.0 --build-context upstream=… docker/camofox     # 先有旧镜像
#   docker build -t umt-browser-desktop:1.17.0 docker/browser-desktop
ARG CAMOFOX_BASE=camofox-browser:1.17.0
# baseimage-selkies debiantrixie(Selkies 2.x、labwc 0.8.3,已含 fonts-noto-cjk);按 digest 锁定,升级需重新核验
ARG SELKIES_BASE=ghcr.io/linuxserver/baseimage-selkies:debiantrixie@sha256:f3ca0b10e923a603941a996ea1c3356b9527cc53163259f4e836f61fd4523e12

FROM ${CAMOFOX_BASE} AS camofox

FROM ${SELKIES_BASE}

ARG APT_MIRROR=
# 1 = 装容器内输入法 fcitx5(拼音 + mozc,缺省装;是否启动由运行时 UMT_DESKTOP_IME=fcitx5 决定)
ARG WITH_FCITX5=1

RUN if [ -n "$APT_MIRROR" ]; then for f in /etc/apt/sources.list.d/debian.sources /etc/apt/sources.list; do [ -f "$f" ] && sed -i "s@deb.debian.org@${APT_MIRROR}@g" "$f"; done; fi \
  && apt-get update \
  && apt-get install -y --no-install-recommends \
    libdbus-glib-1-2 libxt6t64 libasound2t64 libx11-xcb1 libxcomposite1 libxcursor1 libxdamage1 libxfixes3 \
    libxi6 libxrandr2 libxrender1 libxss1 libxtst6 libegl1 libgl1-mesa-dri libgbm1 \
    fonts-noto-cjk fonts-noto-cjk-extra fonts-noto-color-emoji fontconfig \
  && if [ "$WITH_FCITX5" = "1" ]; then \
       apt-get install -y --no-install-recommends \
         fcitx5 fcitx5-chinese-addons fcitx5-mozc fcitx5-frontend-gtk3 fcitx5-config-qt- ; \
     fi \
  && apt-get clean && rm -rf /var/lib/apt/lists/* /tmp/*

COPY --from=camofox /usr/local/bin/node /usr/local/bin/node
COPY --from=camofox /app /opt/camofox
COPY --from=camofox /root/.cache/camoufox /opt/camoufox
COPY root/ /

LABEL org.opencontainers.image.title="umt-browser-desktop" \
      org.opencontainers.image.description="camofox-browser 1.17.0 (headed, Wayland) on linuxserver baseimage-selkies" \
      org.opencontainers.image.version="1.17.0"

ENV CAMOUFOX_INSTALL_DIR=/opt/camoufox \
    NODE_ENV=production \
    CAMOFOX_PORT=9377 \
    CAMOFOX_INTERACTIVE=desktop \
    MOZ_ENABLE_WAYLAND=1 \
    PIXELFLUX_WAYLAND=true \
    START_DOCKER=false \
    NO_GAMEPAD=true \
    NO_WEBCAM=true \
    CUSTOM_USER=umt \
    TITLE="原站视图" \
    NO_DECOR=true \
    HARDEN_DESKTOP=true \
    HARDEN_OPENBOX=true \
    # HARDEN_OPENBOX 缺省会开 RESTART_APP(看门狗每秒重跑 autostart);浏览器由 svc-camofox 管,不需要
    RESTART_APP=false \
    SELKIES_ENABLE_BASIC_AUTH=true \
    # s6 停服务的宽限:camofox 关机要落盘登录状态(缺省 3 秒不够)
    S6_SERVICES_GRACETIME=25000 \
    S6_KILL_GRACETIME=5000

EXPOSE 3000 9377