Update Dockerfile

Dockerfile

@@ -1,14 +1,48 @@
-FROM docker:27-cli  # Docker CLI only (lighter than full dind)
+# Base: docker CLI image (lighter than full dind)
+FROM docker:27-cli
 
-# Install dependencies: git, python3, pip, and docker-compose
-RUN apk add --no-cache git py3-pip python3 \
-    && pip install docker-compose
+# Install required packages
+RUN apk add --no-cache \
+      git \
+      nodejs \
+      npm \
+      python3 \
+      make \
+      bash \
+      curl \
+      shadow
 
-# Set working directory
-WORKDIR /app
+# Install pnpm globally
+RUN npm install -g pnpm
 
-# Clone the Firecrawl repository
-RUN git clone https://github.com/firecrawl/firecrawl.git .
+# --- Create non-root user ---
+# Create group and user (uid/gid = 1000 by convention)
+RUN addgroup -g 1000 appgroup && \
+    adduser -D -u 1000 -G appgroup appuser
 
-# Default command to run docker-compose
-CMD ["docker-compose", "up"]
+# Set working directory with correct ownership
+WORKDIR /opt/firecrawl
+RUN chown -R appuser:appgroup /opt/firecrawl
+
+# Switch to non-root user
+USER appuser
+
+# Clone Firecrawl repo (user has permissions now)
+RUN git clone https://github.com/firecrawl/firecrawl.git . 
+
+# Install dependencies inside API & services
+WORKDIR /opt/firecrawl/apps/api
+RUN pnpm install
+
+WORKDIR /opt/firecrawl/apps/playwright-service
+RUN pnpm install
+
+# Back to root project folder
+WORKDIR /opt/firecrawl
+
+# Expose ports
+EXPOSE 3002
+# EXPOSE 3000
+
+# Run docker-compose (container must be started with mounted docker.sock)
+CMD ["docker-compose", "-f", "docker-compose.yaml", "up", "--build"]