FROM node:24-alpine

# Set user to root for installation
USER root
# Arguments that can be passed at build time
ARG N8N_PATH=/usr/local/lib/node_modules/n8n
ARG BASE_PATH=/root/.n8n
ARG DATABASE_PATH=$BASE_PATH/database
ARG CONFIG_PATH=$BASE_PATH/config
ARG WORKFLOWS_PATH=$BASE_PATH/workflows
ARG LOGS_PATH=$BASE_PATH/logs
ARG N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS=$N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS
ARG N8N_HOST=$N8N_HOST
ARG N8N_PORT=$N8N_PORT
ARG N8N_PROTOCOL=https
ARG N8N_EDITOR_BASE_URL=$N8N_EDITOR_BASE_URL
ARG WEBHOOK_URL=$WEBHOOK_URL
ARG GENERIC_TIMEZONE=$GENERIC_TIMEZONE
ARG TZ=$TZ
ARG N8N_ENCRYPTION_KEY=$N8N_ENCRYPTION_KEY
ARG DB_TYPE=$DB_TYPE
ARG DB_POSTGRESDB_SCHEMA=$DB_POSTGRESDB_SCHEMA
ARG DB_POSTGRESDB_HOST=$DB_POSTGRESDB_HOST
ARG DB_POSTGRESDB_DATABASE=$DB_POSTGRESDB_DATABASE
ARG DB_POSTGRESDB_PORT=$DB_POSTGRESDB_PORT
ARG DB_POSTGRESDB_USER=$DB_POSTGRESDB_USER
ARG DB_POSTGRESDB_PASSWORD=$DB_POSTGRESDB_PASSWORD

# --- AI Assistant (instance-ai) ---
# HF Space containers are not privileged, so n8n's own bundled sandbox
# (n8n-sandbox, which needs a privileged Docker-in-Docker runner) cannot
# run here. Daytona is a managed/remote sandbox, so it's the only sandbox
# provider that works on this host — set these as HF Space *secrets*,
# never hardcode real keys into this file or a public repo.
ARG N8N_ENABLED_MODULES=$N8N_ENABLED_MODULES
ARG N8N_INSTANCE_AI_MODEL=$N8N_INSTANCE_AI_MODEL
ARG N8N_INSTANCE_AI_MODEL_API_KEY=$N8N_INSTANCE_AI_MODEL_API_KEY
ARG N8N_INSTANCE_AI_SANDBOX_ENABLED=$N8N_INSTANCE_AI_SANDBOX_ENABLED
ARG N8N_INSTANCE_AI_SANDBOX_PROVIDER=$N8N_INSTANCE_AI_SANDBOX_PROVIDER
ARG N8N_INSTANCE_AI_SANDBOX_IMAGE=$N8N_INSTANCE_AI_SANDBOX_IMAGE
ARG DAYTONA_API_URL=$DAYTONA_API_URL
ARG DAYTONA_API_KEY=$DAYTONA_API_KEY
# Optional: web search for the AI Assistant (also doesn't use the N8N_ prefix)
ARG INSTANCE_AI_BRAVE_SEARCH_API_KEY=$INSTANCE_AI_BRAVE_SEARCH_API_KEY

# Install system dependencies
RUN apk add --no-cache \
    git \
    python3 \
    py3-pip \
    make \
    g++ \
    build-base \
    cairo-dev \
    pango-dev \
    chromium \
    postgresql-client \
    ffmpeg \
    yt-dlp

# Set environment variables
ENV PUPPETEER_SKIP_DOWNLOAD=true
ENV PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium-browser

# Install n8n globally
RUN npm install -g n8n@next

# Install Gemini CLI globally
# RUN npm install -g @google/gemini-cli

# Create necessary directories
RUN mkdir -p $DATABASE_PATH $CONFIG_PATH $WORKFLOWS_PATH $LOGS_PATH \
    && chmod -R 777 $BASE_PATH

# Set working directory
WORKDIR /data

# Set the USER to the non-root user that runs the application
USER node 
# Or USER root, depending on your setup, but 'node' is standard for n8n.

# Explicitly create the .n8n directory and ensure permissions are correct
# This is typically where n8n looks for instance-settings.json
RUN mkdir -p /home/node/.n8n && chown -R node:node /home/node/.n8n

# Start n8n
CMD ["n8n", "start"]