FROM node:20-slim

RUN apt-get update && apt-get install -y \
    chromium git ca-certificates --no-install-recommends \
    && rm -rf /var/lib/apt/lists/*

ENV CHROME_BIN=/usr/bin/chromium

WORKDIR /app

RUN --mount=type=secret,id=GITHUB_TOKEN \
    git clone https://$(cat /run/secrets/GITHUB_TOKEN)@github.com/emmyhenz/bypass-cf.git . && \
    git checkout main

# Use npm install instead of npm ci (no lockfile)
RUN npm install --omit=dev

EXPOSE 7860
CMD ["node", "server.js"]