start.sh

#!/bin/bash

# Fresh everything
rm -rf /tmp/.X* /tmp/chrome/* \~/.cache/* 2>/dev/null || true
mkdir -p /tmp/chrome

# VNC server no password (private space hai)
vncserver :1 -geometry $VNC_RESOLUTION -depth 24 -SecurityTypes None &

sleep 3

# noVNC web server on HF port
websockify --web=/usr/share/novnc 7860 localhost:5901 &

sleep 2

# Light desktop
fluxbox &

sleep 2

# SUPER STEALTH CHROMIUM - no cookies, anti-detect
chromium --no-sandbox \
  --disable-setuid-sandbox \
  --user-data-dir=/tmp/chrome \
  --incognito \
  --disk-cache-dir=/dev/null \
  --disable-blink-features=AutomationControlled \
  --disable-features=Translate,PrivacySandboxSettings4,OptimizationGuideModelExecution,InterestFeedContentSuggestions \
  --disable-sync \
  --no-first-run \
  --no-default-browser-check \
  --disable-infobars \
  --disable-background-timer-throttling \
  --disable-renderer-backgrounding \
  --disable-backgrounding-occluded-windows \
  --disable-component-update \
  --start-maximized \
  https://duckduckgo.com &

# Keep container alive
tail -f /dev/null