Update Dockerfile

Dockerfile

@@ -1,53 +1,43 @@
 # 1. Base Image: WebTop (Ubuntu XFCE)
 FROM lscr.io/linuxserver/webtop:ubuntu-xfce
 
-# Switch to root
+# Switch to root to install dependencies and configure system
 USER root
 
 # ==========================================
-# ⚡ NETWORK BRIDGE
+# 📦 ESSENTIALS ONLY
 # ==========================================
+# socat: Needed for the port bridge
+# curl/wget: Needed for you to download apps manually
 RUN apt-get update && \
-    apt-get install -y socat wget jq curl && \
-    rm -rf /var/lib/apt/lists/*
+    apt-get install -y \
+    socat \
+    curl \
+    wget \
+    && rm -rf /var/lib/apt/lists/*
 
+# ==========================================
+# ⚡ NETWORK BRIDGE (Port 7860 -> 3000)
+# ==========================================
 RUN mkdir -p /etc/services.d/forwarder && \
     echo '#!/usr/bin/with-contenv bash' > /etc/services.d/forwarder/run && \
     echo 'exec socat TCP-LISTEN:7860,fork,reuseaddr TCP:127.0.0.1:3000' >> /etc/services.d/forwarder/run && \
     chmod +x /etc/services.d/forwarder/run
 
 # ==========================================
-# 📦 SOFTWARE FIX (The "No Sandbox" Patch)
-# ==========================================
-RUN apt-get update && \
-    apt-get install -y chromium-browser xz-utils && \
-    # 1. Install UBlock Origin (Bandwidth Saver)
-    mkdir -p /etc/chromium/policies/managed && \
-    echo '{ "ExtensionSettings": { "cjpalhdlnbpafiamejdnhcphjbkeiagm": { "installation_mode": "force_installed", "update_url": "https://clients2.google.com/service/update2/crx" } } }' > /etc/chromium/policies/managed/ublock_origin.json && \
-    # 2. THE CRITICAL FIX: TRICK CHROMIUM TO RUN AS ROOT
-    mv /usr/bin/chromium-browser /usr/bin/chromium-browser-original && \
-    echo '#!/bin/bash\n/usr/bin/chromium-browser-original --no-sandbox --test-type --disable-gpu "$@"' > /usr/bin/chromium-browser && \
-    chmod +x /usr/bin/chromium-browser && \
-    rm -rf /var/lib/apt/lists/*
-
-# ==========================================
-# 🤝 SHARED VIEWING (Prevent Session Kill)
+# 🤝 SHARED SESSION FIX
 # ==========================================
-# This enables the "User X wants to connect" popup. 
-# YOU MUST CLICK "ALLOW" ON THE SCREEN WHEN SHE JOINS.
-ENV KASM_SVC_CONCURRENT_CONNECTIONS_PROMPT=true
-ENV KASM_SVC_CONCURRENT_CONNECTIONS=true
+# This allows you and your wife to be logged in at the exact same time.
+# We modify the default KasmVNC config to allow concurrent connections.
+RUN sed -i 's/allow_concurrent_connections: false/allow_concurrent_connections: true/g' /defaults/kasmvnc.yaml || \
+    echo "allow_concurrent_connections: true" >> /defaults/kasmvnc.yaml
 
 # ==========================================
-# 🚀 480p SPEED TUNING (854x480)
+# 🚀 PERFORMANCE (480p Speed Mode)
 # ==========================================
 ENV CUSTOM_RES_W=854
 ENV CUSTOM_RES_H=480
 ENV KASM_SVC_FRAMERATE=24
-ENV KASM_SVC_AUDIO_BITRATE=64000
-# Force WebP Compression (Fastest for Video)
-ENV KASM_SVC_VIDEO_QUALITY=5
-ENV KASM_SVC_VIDEO_CRF=35
 ENV KASM_SVC_COMPRESSION_ALGO=webp
 ENV KASM_SVC_LOSSY_COMPRESSION=true
 
@@ -55,18 +45,17 @@ ENV KASM_SVC_LOSSY_COMPRESSION=true
 RUN xfconf-query -c xfwm4 -p /general/use_compositing -s false || true
 
 # ==========================================
-# 🎨 BRANDING
-# ==========================================
-ENV TITLE="💻"
-
-# ==========================================
-# 👤 CREDENTIALS
+# 👤 CREDENTIALS & USER ID
 # ==========================================
+ENV TITLE="💚"
 ENV CUSTOM_USER="Admin"
 ENV PASSWORD="121459"
-# We must keep PUID/PGID as 0 to match the 'root' user setting
-ENV PUID=0
-ENV PGID=0
+
+# ⚠️ SECURITY FIX: 
+# Changed from 0 (Root) to 1000 (Normal User).
+# This FIXES the issue where software would not run.
+ENV PUID=1000
+ENV PGID=1000
 ENV TZ="Asia/Tehran"
 
 EXPOSE 7860