Update Dockerfile

Dockerfile

@@ -1,16 +1,23 @@
 FROM node:18-bullseye-slim
 
-# 1. Install utilities to download Google's keys (wget, gnupg)
+# 1. Install utilities and certificates
+# We need ca-certificates so wget can talk to https sites
 RUN apt-get update && apt-get install -y \
     wget \
     gnupg \
+    ca-certificates \
     --no-install-recommends
 
-# 2. Add Google's signing key and repository
-RUN wget -q -O - https://dl-ssl.google.com/linux/linux_signing_key.pub | apt-key add - \
-    && sh -c 'echo "deb [arch=amd64] http://dl.google.com/linux/chrome/deb/ stable main" >> /etc/apt/sources.list.d/google.list'
+# 2. Add Google's signing key safely
+# We download the key, dearmor it, and save it to a specific keyring location
+RUN wget -q -O - https://dl-ssl.google.com/linux/linux_signing_key.pub \
+    | gpg --dearmor -o /usr/share/keyrings/google-chrome-keyring.gpg
 
-# 3. Install System Dependencies (FFmpeg, Xvfb, Chrome, Fonts)
+# 3. Add the Google Repository referencing the key
+RUN echo "deb [arch=amd64 signed-by=/usr/share/keyrings/google-chrome-keyring.gpg] http://dl.google.com/linux/chrome/deb/ stable main" \
+    > /etc/apt/sources.list.d/google-chrome.list
+
+# 4. Install System Dependencies (FFmpeg, Xvfb, Chrome, Fonts)
 RUN apt-get update && apt-get install -y \
     ffmpeg \
     xvfb \
@@ -29,8 +36,10 @@ RUN apt-get update && apt-get install -y \
 WORKDIR /app
 
 # Copy package.json and install node dependencies
-# We set PUPPETEER_SKIP_CHROMIUM_DOWNLOAD to true because we installed Chrome manually above
+# Skip chromium download since we installed it manually
 ENV PUPPETEER_SKIP_CHROMIUM_DOWNLOAD=true
+ENV PUPPETEER_EXECUTABLE_PATH=/usr/bin/google-chrome
+
 COPY package.json ./
 RUN npm install