Update Dockerfile

Dockerfile

@@ -18,7 +18,7 @@ FROM node:24-bookworm-slim AS webapp
 # which cannot read this repo's lockfile. 11.21.0 is the version declared in
 # devEngines and verified against pnpm-lock.yaml.
 RUN corepack enable && corepack prepare pnpm@11.21.0 --activate
-RUN apt-get update && apt-get install -y --no-install-recommends git && rm -rf /var/lib/apt/lists/*
+RUN apt-get update && apt-get install -y --no-install-recommends git ca-certificates && rm -rf /var/lib/apt/lists/*
 
 WORKDIR /build
 
@@ -36,8 +36,14 @@ RUN git init . \
  && git checkout FETCH_HEAD
 
 # Install deps. package.json's postinstall runs lexicons:generate and
-# intl:compile, which the webpack build needs.
-RUN pnpm install --frozen-lockfile || pnpm install --no-frozen-lockfile
+# intl:compile, which the webpack build needs. If the clone lost the lockfile
+# (unlikely), fall back to a plain install.
+RUN if [ -f pnpm-lock.yaml ]; then \
+      pnpm install --frozen-lockfile || pnpm install --no-frozen-lockfile; \
+    else \
+      echo "[build] pnpm-lock.yaml missing - regenerating" && \
+      pnpm install --no-frozen-lockfile; \
+    fi
 
 # postinstall generated lexicons + i18n catalogs; verify they exist (the
 # intl:compile-if-needed guard is skipped outside CI, so compile explicitly
@@ -49,7 +55,7 @@ RUN test -d src/lexicons && echo "[build] lexicons OK" \
 # Build the static web app with this PDS baked in as the default service,
 # so sign-in/sign-up default to this server (users can still pick another).
 # On HF Spaces, set a Space variable PDS_HOSTNAME and rebuild so this matches.
-ARG PDS_HOSTNAME=cloudunity-gemma-api1.hf.space
+ARG PDS_HOSTNAME=hf.space
 ENV EXPO_PUBLIC_DEFAULT_SERVICE=https://${PDS_HOSTNAME}
 ENV EXPO_PUBLIC_BUNDLE_IDENTIFIER=rochester-pds
 ENV NODE_ENV=production
@@ -310,7 +316,10 @@ ENV PDS_EMAIL_FROM_ADDRESS=
 # Skip email confirmation flow entirely (no SMTP on HF)
 ENV PDS_EMAIL_DISABLE_CONFIRMATION_LINK=true
 
-# Public hostname. Users' handles will be <name>.<that hostname>.
+# Public hostname. Set this to your Space's public URL (as a Space secret or
+# variable named PDS_HOSTNAME) so the PDS advertises the right endpoint:
+#   https://<owner>-<space>.hf.space
+# Users' handles will be <name>.<that hostname>.
 ENV PDS_HOSTNAME=cloudunity-gemma-api1.hf.space
 
 EXPOSE 7860